XenServer - Disable promiscuous mode on all network interfaces

Information

In promiscuous mode all packets received will be processed by the host or VM, which could expose confidential information.

Solution

Run the following command for each physical interface (pif), especially those that will host VM guests:


xe pif-param-set uuid=<pif-uuid> other-config:promiscuous='off'

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7, CSCv6|9.1

Plugin: Unix

Control ID: 26e6fae715355836f88a493ad119c5a901ca799317bb34ea1147b8cbd6db02b0