asked on

vSphere 4 - Disable Web-Based Datastore Browser

Guys/Gals,

Is there any way of disabling the Web-Based Datastore Browser funtion for each ESX host server? I have gone as far as renaming the index.html but if you know the URL to Browse then you can still get prompted for login credentials.

We have already disabled the Web Access service as part of VMware hardening. We want to completely disable the home page and underlying access to Browse Datastores etc.

I need to disble this option to further enhance security.

Thanks in advance

Andrew Hancock (VMware vExpert PRO / EE Fellow/British Beekeeper)

You can change the ports in the PROXY.XML file on the ESX hosts servers, to different hidden ports.

You can also comment out the Web Section, and Object Sections as per this document

It mentions Security Hardening
vSphere Hardening Document

ASKER CERTIFIED SOLUTION

Andrew Hancock (VMware vExpert PRO / EE Fellow/British Beekeeper)

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Andrew Hancock (VMware vExpert PRO / EE Fellow/British Beekeeper)

or using vCLI

vmware-vim-cmd proxysvc/remove_service "/mob" "httpsWithRedirect"

Andrew Hancock (VMware vExpert PRO / EE Fellow/British Beekeeper)

if you are tempted to edit with WinSCP, make sure you backup the file first, and make the correct, corrections to the XML file, because it's very fussy.

15moorgate

ASKER

Thank you very much sir, greatly appreciated the quick response and all the links.

Out Internet suffered yesterday otherwise I would have closed then.

Regards
JEL