I am not convinced of the supreme benefit of adding an antivirus to a hypervisor; it is really more a question of ticking a box, yes.
It can be F-Secure, ClamAV, or another one. I haven't seen any official statement from Proxmox on this subject...
Thanks @sumanraic001 but I already have my users (with PVE authentication serveur or AD). The question is to deny root connection by SSH but let users still connect with their own accounts ; I can do it but my question is if PVE can have some...
It's private IP, my bad.
Nodes are on a different VLAN than users workstations (for example : 1.2.3.0/24 for nodes and 10.10.10.0/24 for workstations). Of course I can't block it with firewall rules, but... my users need to connect on nodes...
Thanks.
I understand that PVE uses root access for a lot of things. But, why PVE can't be working safely if I just restrict root SSH connection from outside the cluster ? The main goal is to deny users to connect with root SSH on cluster from...
It's my opinion too, but I have to provide objective evidence to justify not installing antivirus. A clear statement from Proxmox would be ideal, but perhaps they don't see any real technical drawbacks.
Hi,
Is it OK to restrict SSH PermitRootLogin to only PVE IP? Would this have an impact on how PVE works?
The goal is to prevent direct root connection via SSH from the rest of the network.
Match User root Address 1.2.3.*
PermitRootLogin...
Hi,
Is there an official statement from Proxmox regarding the installation of antivirus software on PVE?
Does this installation affect the license and support provided?
Thanks!