Hello- Let me start by saying that I am unfamiliar with VMs. We are a 1:1 Apple School. One of our HS student’s is taking a cybersecurity class online and has requested I install Virtual Box on their MacBook, along with Ubuntu. What sort of security, privacy issues am I looking at here? We have JAMF Safe installed on all our computers. Will they be able to skirt our filters?
Question
VM on Student Computer
+4
+21First let me advise you to use the built in UTM framework for this. If your concern is about privacy and filters and such, then your answer is yes. You’ll want to treat the VM as a separate asset - by locking it down individually.
+26You really want to take this question to your security team. The guest OS is totally independent of the host OS. None of the security or management tools on the host OS will apply. VM's need to be managed independently of the host if you want them managed at all.
+21You really want to take this question to your security team. The guest OS is totally independent of the host OS. None of the security or management tools on the host OS will apply. VM's need to be managed independently of the host if you want them managed at all.
Actually since the network has to be bridged, some network filters (depending on how they inject themselves into the network stack) will filter the VM traffic. Most of the other stuff though will need to be treated like a standalone machine.
+26You really want to take this question to your security team. The guest OS is totally independent of the host OS. None of the security or management tools on the host OS will apply. VM's need to be managed independently of the host if you want them managed at all.
Actually since the network has to be bridged, some network filters (depending on how they inject themselves into the network stack) will filter the VM traffic. Most of the other stuff though will need to be treated like a standalone machine.
I did consider mentioning this, but I did not want to get that far in to the weeds with a fundamental question. NAT vs Bridged network connections can be a bit to understand.
The cleanest solution here is probably to give the student an unmanaged Mac and have them configure it as needed for this class. Honestly, any management on the guest Ubuntu install could easily interfere with the coursework from this cyber security class.
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.