block Virtualization

van_sta · ‎10-14-2025

hello everybody: I installed a virtual machine on my computer (Oracle Virtual Box) to run behavior tests on my network. I noticed that even though it's not loaded, it browses normally. I'd like to know how to prevent any machine running in a virtual machine from browsing. I've tried to detect the virtual machine by MAC or IP, but I can't. How can I block virtual machines? I searched the security profiles and only found VMware. Can you give me some ideas on what to do?

Thank you very much.

distillednetwork · ‎10-14-2025

A VM running on a machine in NAT mode is going to be very difficult to detect. You would need to take action on the endpoint itself to scan for virtualization or virtualized interfaces.

The application control in the firewalls is not meant for applications running on the machines, but more so the SaaS apps that people may be using, and detecting that traffic profile. All the firewall is able to see is network traffic.

::: If a solution is helpful, don't forget to give kudos or Accept as Solution for others. :::

View solution in original post

distillednetwork · ‎10-14-2025

A VM running on a machine in NAT mode is going to be very difficult to detect. You would need to take action on the endpoint itself to scan for virtualization or virtualized interfaces.

The application control in the firewalls is not meant for applications running on the machines, but more so the SaaS apps that people may be using, and detecting that traffic profile. All the firewall is able to see is network traffic.

::: If a solution is helpful, don't forget to give kudos or Accept as Solution for others. :::

van_sta · ‎10-15-2025

I assumed it was like that. Thank you very much.

block Virtualization

Nominate a Forum Post for Knowledge Article Creation

You are leaving our website