Use Virtual Machine as offline secure computer?

It read somewhere that if you want to keep particular applications secure to use a computer that is not connected to the internet ever. I am curious to know if this can apply to a VMWare or Virtual Box machine as well. If the host remains connected to the internet is a viable solution to set up your virtual machine with no internet access? Or does the host being connected run a considerable risk?
LVL 1
Chris JohnstonAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
If the Virtual Machine network interface is disconnected, or only has communication with the host, and has no internet access - nothing on the internet can jump onto the virtual machine.

a bit like removing the network cable from a PC, it has no internet access, so the only risk, is files being copied onto the PC from floppy disks, cdrom or flash drives
1

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
McKnifeCommented:
If the host is somehow infected, of course the VMs are in danger, too, no matter what their network state is. Controlling the host means controlling the guests, unless we are talking about guest isolation  as in Microsoft's concept of "shielded virtual machines".
1
JohnBusiness Consultant (Owner)Commented:
You can use Host Only Network in VMware Workstation, but as noted above you need to keep the host machine secure (which is not hard to do)
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

btanExec ConsultantCommented:
The other way is if the virtual machine (another "container" file) is infected somehow, it is not necessarily the host is infected. However, the vice versa is not true. Host run the hypervisor and if the nerve is compromised, you would have lost half a battle. But you can rebuild from your last backup for host or recover from snapshot if virtual machine is infected only.
0
Ajay ChananaMCSE-2003/08|RHCSA| VCP5/6 |vExpert2018Commented:
On top of Andrew comments, you can do virtual machine security hardening, where you can disable any device to plugin (USB/CD) and disable the hardware changes.
0
McKnifeCommented:
No feedback from the author, no details about the usage scenario.
Of course, just disconnecting the guest does not make it secure for all scenarios.

Author should return, else, an even split between experts would be much fairer.
0
McKnifeCommented:
Even split recommended since it is not possible to tell which applies most.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Virtualization

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.