Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

How to harden Windows 2008 R2 Virtual Machine ?

Posted on 2014-11-28
10
Medium Priority
?
206 Views
Last Modified: 2014-12-02
Dear Experts,

One of our servers with Windows 2008 R2 Enterprise Edition runs on VmWare as a Virtual Machine. This server is an application server and connects to hundreds of systems transferring large amounts of data over network with FTP and Oracle SQLLOADER. We provided the best network environment by means of RAM, bandwidth, etc. However sometimes we face to bottlenecks.

Could you please provide me advanced tips and techniques to harden this server which has heavy network load?

BR
0
Comment
Question by:GurcanK
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
  • 3
10 Comments
 
LVL 123

Assisted Solution

by:Andrew Hancock (VMware vExpert / EE MVE^2)
Andrew Hancock (VMware vExpert / EE MVE^2) earned 800 total points
ID: 40471491
I assume this is Windows Security Hardening ?

Turn on WIndows Firewall, and create rules for all your servers, you need to transfer data to and from.

There is a good guide here and list

https://wikis.utexas.edu/display/ISO/Windows+2008R2+Server+Hardening+Checklist

and Microsofts Baseline Guide here

http://technet.microsoft.com/en-us/library/cc526440.aspx
0
 
LVL 56

Assisted Solution

by:McKnife
McKnife earned 1200 total points
ID: 40471551
Sounds more like the need for performance monitoring to find bottlenecks.
"However sometimes we face to bottlenecks" - if you did face those, you should be able to describe them, I think.
-what was the bottleneck, when did it happen, how often does that happen?
->present process names, numbers (RAM load/storage load/network load)
->describe symptoms (what is expected vs. what is experienced) combined with numbers ("should take 5 seconds, but does take a minute", for example).
0
 

Author Comment

by:GurcanK
ID: 40471612
This is performance bootleneck. Sometimes FTP connections wait till timeout, or SQLLOADER waits forever.
0
Get your Conversational Ransomware Defense e‑book

This e-book gives you an insight into the ransomware threat and reviews the fundamentals of top-notch ransomware preparedness and recovery. To help you protect yourself and your organization. The initial infection may be inevitable, so the best protection is to be fully prepared.

 
LVL 56

Assisted Solution

by:McKnife
McKnife earned 1200 total points
ID: 40471620
You offer no entry points yet. How could you expect profound help with so little information? :-)
->if it normally works, but only sometimes is slow/sometimes times out, you have to analyze and describe the surroundings in that error state as closely as possible.
Monitor the load (hard drive/CPU/RAM) in the error state - anything special to see?
Monitor the system with procmon - anything special happening during errors?
0
 
LVL 123
ID: 40471625
Are you using VMware vSphere (ESXi) to host the VM ?
0
 

Author Comment

by:GurcanK
ID: 40471690
Yes I'm using VMWare vSphere ESXi Host.
0
 

Author Comment

by:GurcanK
ID: 40471693
I examined Performance of server via CPU and Memory usage. Memory is in average %30 and CPU usage in average %88.
0
 
LVL 123

Assisted Solution

by:Andrew Hancock (VMware vExpert / EE MVE^2)
Andrew Hancock (VMware vExpert / EE MVE^2) earned 800 total points
ID: 40471716
Okay, if you are using the E1000 interface for your VMs, this is WRONG!

and you need to replace it with the VMXNET3 interface, which is supported, and you must have VMware Tools installed.

This is a fully virtualised NIC, unlike the E1000 which is a legacy emulation designed for installation only in the OS.

There is also a tuning exercise you must also go through for the VMXNET3.

So do you have the E1000 installed ?
0
 

Author Comment

by:GurcanK
ID: 40471723
Yes it is E1000. This is good point. Thanks.
0
 
LVL 56

Accepted Solution

by:
McKnife earned 1200 total points
ID: 40472395
Another thing: "CPU usage in average %88" - you mean on average, really? That's high. And how is it when the errors occur? Did you try to add another virtual CPU, yet?
0

Featured Post

NFR key for Veeam Agent for Linux

Veeam is happy to provide a free NFR license for one year.  It allows for the non‑production use and valid for five workstations and two servers. Veeam Agent for Linux is a simple backup tool for your Linux installations, both on‑premises and in the public cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

It Is not possible to enable LLDP in vSwitch(at least is not supported by VMware), so in this article we will enable this, and also go trough how to enabled CDP and how to get this information in vSwitches and also in vDS.
This is an issue that we can get adding / removing permissions in the vCSA 6.0. We can also have issues searching for users / groups in the AD (using your identify sources). This is how one of the ways to handle this issues and fix it.
This video shows how to configure and send email from and Oracle database using both UTL_SMTP and UTL_MAIL, as well as comparing UTL_SMTP to a manual SMTP conversation with a mail server.
How to install and configure Citrix XenApp 6.5 - Part 1. In this video tutorial we have explained step by step installation of Citrix XenApp 6.5 Server on Windows Server 2008 R2 is explained in this video. We have explained the difference between…

704 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question