Skip to main content
van_sta
Explorer III
October 14, 2025
Solved

block Virtualization

  • October 14, 2025
  • 2 replies
  • 438 views

hello everybody: I installed a virtual machine on my computer (Oracle Virtual Box) to run behavior tests on my network. I noticed that even though it's not loaded, it browses normally. I'd like to know how to prevent any machine running in a virtual machine from browsing. I've tried to detect the virtual machine by MAC or IP, but I can't. How can I block virtual machines? I searched the security profiles and only found VMware. Can you give me some ideas on what to do?

Thank you very much.

Best answer by distillednetwork

A VM running on a machine in NAT mode is going to be very difficult to detect.  You would need to take action on the endpoint itself to scan for virtualization or virtualized interfaces.

 

The application control in the firewalls is not meant for applications running on the machines, but more so the SaaS apps that people may be using, and detecting that traffic profile.  All the firewall is able to see is network traffic.

2 replies

distillednetwork
Explorer II
October 14, 2025

A VM running on a machine in NAT mode is going to be very difficult to detect.  You would need to take action on the endpoint itself to scan for virtualization or virtualized interfaces.

 

The application control in the firewalls is not meant for applications running on the machines, but more so the SaaS apps that people may be using, and detecting that traffic profile.  All the firewall is able to see is network traffic.

van_sta
van_staAuthor
Explorer III
October 15, 2025

I assumed it was like that. Thank you very much.