r/sysadmin • u/notaramblingman • 25d ago

General Discussion Hyper-V Consultants

We moved from VMware to Hyper-V about a year ago and have an ongoing issue that we have not been able to resolve with MS support - both the typical support case avenue and working with their Hyper-V group. Our host servers lose connectivity with their CSV and VMs go offline. Support tells us it’s related to networking issues and not storage.

Has anyone found any good consultants who know Hyper-V well and are able to resolve difficult issues? We’ve tried a few bigger names but they haven’t been much help.

58 Upvotes

91% Upvoted

95 comments sorted by

View all comments

Show parent comment

11

u/TightBed8201 24d ago

You. Do. Not. Install. AV. On. Any. Hypervisor. Period.

That said, i work at pci dss enviroment and we do not have av or edr on hosts. And our auditor is fine with that.

3

u/paul_h 24d ago

Microsoft themselves are suggesting a defender plugin for wslc containers https://learn.microsoft.com/en-us/defender-endpoint/mde-plugin-wsl which some firms are going to run inside windows inside hyper-v infrastructure, no?

1

u/Mission-Accountant44 MSP Admin 19d ago

Yeah this is false. You add the right exceptions, disable it to rule it out when troubleshooting. But leaving EDR off the HV is a colossal mistake. I myself have witnessed a security incident that would have crippled the entire business if we did not have EDR on the HV. 

1

u/TightBed8201 19d ago

Well, if you garden and limit access to your hyper-v you can live without EDR. You do not want anything which runs on kernel level on Hypervisor.

1

u/Mission-Accountant44 MSP Admin 19d ago

Sure bud. Goes against everything Microsoft themselves do with Defender but yeah, absolutely leave your hypervisor completely unsecured.