TonyJK wrote:
A VMWare Health Check is conducted by a consultant. He writes:
VM's Port Group Security Policy are default value and not changed as per BP AND
Storage Multipathing Policy is as per BP.
We just wonder what does BP means and how to change Port Group Security Policy. We would like to get some background knowledge before discussing with him.
Your advice is sought.
The default port group setting is:
Reject promiscuous mode
Accept mac address changes
Accept forged transmits
You can of course, easily change these to "Reject" with little impact in most circumstances.
Likewise, realistic impact of leaving this setting at default is practically nil, unless you have some sort of device on your network performing security based on MAC addresses.
As far as the Storage multipathing policy, he appears to state it's "correct" and shouldn't be changed.
It sounds like a pretty pedantic piece of advise from someone who couldn't come up with much else to be honest.