< Back
Revoke-NsxSpoofguardNicApproval
Post
NAME Revoke-NsxSpoofguardNicApproval
SYNOPSIS
Removes an approved IP from the specified Spoofguard NIC.
SYNTAX
Revoke-NsxSpoofguardNicApproval -SpoofguardNic <XmlElement> -IpAddress <String[]> [-Confirm] [-Publish]
[-Connection <PSObject>] [<CommonParameters>]
Revoke-NsxSpoofguardNicApproval -SpoofguardNic <XmlElement> -RevokeAllApprovedIps [-Confirm] [-Publish]
[-Connection <PSObject>] [<CommonParameters>]
DESCRIPTION
If a virtual machine has been compromised, its IP address can be spoofed
and malicious transmissions can bypass firewall policies. You create a
SpoofGuard policy for specific networks that allows you to authorize the IP
addresses reported by VMware Tools and alter them if necessary to prevent
spoofing. SpoofGuard inherently trusts the MAC addresses of virtual machines
collected from the VMX files and vSphere SDK. Operating separately from
Firewall rules, you can use SpoofGuard to block traffic determined to be
spoofed.
Use the Revoke-NsxSpoofguardNicApproval cmdlet to remove the specified IP
from the list of approved IPs for the specified Spoofguard NIC.
PARAMETERS
-SpoofguardNic <XmlElement>
Required? true
Position? named
Default value
Accept pipeline input? true (ByValue)
Accept wildcard characters? false
-IpAddress <String[]>
Required? true
Position? named
Default value
Accept pipeline input? false
Accept wildcard characters? false
-RevokeAllApprovedIps [<SwitchParameter>]
Required? true
Position? named
Default value False
Accept pipeline input? false
Accept wildcard characters? false
-Confirm [<SwitchParameter>]
Prompt for confirmation. Specify as -confirm:$false to disable confirmation prompt
Required? false
Position? named
Default value True
Accept pipeline input? false
Accept wildcard characters? false
-Publish [<SwitchParameter>]
Required? false
Position? named
Default value False
Accept pipeline input? false
Accept wildcard characters? false
-Connection <PSObject>
PowerNSX Connection object
Required? false
Position? named
Default value $defaultNSXConnection
Accept pipeline input? false
Accept wildcard characters? false
<CommonParameters>
This cmdlet supports the common parameters: Verbose, Debug,
ErrorAction, ErrorVariable, WarningAction, WarningVariable,
OutBuffer, PipelineVariable, and OutVariable. For more information, see
about_CommonParameters (https:/go.microsoft.com/fwlink/?LinkID=113216).
INPUTS
OUTPUTS
-------------------------- EXAMPLE 1 --------------------------
PS C:\\>Get-NsxSpoofguardPolicy test | Get-NsxSpoofguardNic -NetworkAdapter (Get-vm evil-vm | Get-NetworkAdapter|
select -First 1) | Revoke-NsxSpoofguardNicApproval -RevokeAllApprovedIps -publish
Revoke all approved IPs for vm evil-vm and immediately publish the policy.
-------------------------- EXAMPLE 2 --------------------------
PS C:\\>Get-NsxSpoofguardPolicy test | Get-NsxSpoofguardNic -NetworkAdapter (Get-vm evil-vm | Get-NetworkAdapter|
select -First 1) | Revoke-NsxSpoofguardNicApproval -IpAddress 1.2.3.4
Revoke the approval for IP 1.2.3.4 from the first nic on vm evil-vm.
RELATED LINKS
SYNOPSIS
Removes an approved IP from the specified Spoofguard NIC.
SYNTAX
Revoke-NsxSpoofguardNicApproval -SpoofguardNic <XmlElement> -IpAddress <String[]> [-Confirm] [-Publish]
[-Connection <PSObject>] [<CommonParameters>]
Revoke-NsxSpoofguardNicApproval -SpoofguardNic <XmlElement> -RevokeAllApprovedIps [-Confirm] [-Publish]
[-Connection <PSObject>] [<CommonParameters>]
DESCRIPTION
If a virtual machine has been compromised, its IP address can be spoofed
and malicious transmissions can bypass firewall policies. You create a
SpoofGuard policy for specific networks that allows you to authorize the IP
addresses reported by VMware Tools and alter them if necessary to prevent
spoofing. SpoofGuard inherently trusts the MAC addresses of virtual machines
collected from the VMX files and vSphere SDK. Operating separately from
Firewall rules, you can use SpoofGuard to block traffic determined to be
spoofed.
Use the Revoke-NsxSpoofguardNicApproval cmdlet to remove the specified IP
from the list of approved IPs for the specified Spoofguard NIC.
PARAMETERS
-SpoofguardNic <XmlElement>
Required? true
Position? named
Default value
Accept pipeline input? true (ByValue)
Accept wildcard characters? false
-IpAddress <String[]>
Required? true
Position? named
Default value
Accept pipeline input? false
Accept wildcard characters? false
-RevokeAllApprovedIps [<SwitchParameter>]
Required? true
Position? named
Default value False
Accept pipeline input? false
Accept wildcard characters? false
-Confirm [<SwitchParameter>]
Prompt for confirmation. Specify as -confirm:$false to disable confirmation prompt
Required? false
Position? named
Default value True
Accept pipeline input? false
Accept wildcard characters? false
-Publish [<SwitchParameter>]
Required? false
Position? named
Default value False
Accept pipeline input? false
Accept wildcard characters? false
-Connection <PSObject>
PowerNSX Connection object
Required? false
Position? named
Default value $defaultNSXConnection
Accept pipeline input? false
Accept wildcard characters? false
<CommonParameters>
This cmdlet supports the common parameters: Verbose, Debug,
ErrorAction, ErrorVariable, WarningAction, WarningVariable,
OutBuffer, PipelineVariable, and OutVariable. For more information, see
about_CommonParameters (https:/go.microsoft.com/fwlink/?LinkID=113216).
INPUTS
OUTPUTS
-------------------------- EXAMPLE 1 --------------------------
PS C:\\>Get-NsxSpoofguardPolicy test | Get-NsxSpoofguardNic -NetworkAdapter (Get-vm evil-vm | Get-NetworkAdapter|
select -First 1) | Revoke-NsxSpoofguardNicApproval -RevokeAllApprovedIps -publish
Revoke all approved IPs for vm evil-vm and immediately publish the policy.
-------------------------- EXAMPLE 2 --------------------------
PS C:\\>Get-NsxSpoofguardPolicy test | Get-NsxSpoofguardNic -NetworkAdapter (Get-vm evil-vm | Get-NetworkAdapter|
select -First 1) | Revoke-NsxSpoofguardNicApproval -IpAddress 1.2.3.4
Revoke the approval for IP 1.2.3.4 from the first nic on vm evil-vm.
RELATED LINKS