Tripwire and VMware have teamed up to produce a free tool that VMware customers can use to automatically audit the security configuration of physical and virtual servers.
Tripwire ConfigCheck is a lightweight version of Tripwire Enterprise For VMware ESX Server -a security and compliance-checking application designed to evaluate large server installations. Tripwire ConfigCheck is designed to sift through the hundreds of configuration settings within VMware's ESX Server and identify those that are not set according to VMware's recommendations.
The new tool also provides guidelines users can follow to fix the problems, if they choose to do so. More information and a download is on Tripwire's ConfigCheck site.
A VMware spokesperson says the company put the tool together to help customers identify and fix potential configuration problems even before calling in their security specialists. Tripwire spokespeople say they're interested in giving prospective customers a taste of their enterprise products, which cover physical and virtual assets including those from companies other than VMware.
ConfigCheck is available free; it will be formally announced tomorrow.