1.0

www.vmware.com
238
VMware ACE Administrator’s Manual
to use bridged networking. Or if you are using NAT networking, give the host access
to the network resources required by the virtual machine. For example, you may want
to allow the host — and thus the virtual machine — to connect to a VPN server. The
VPN server then controls access to additional resources. In addition, if you have set
authentication or device connection policies that require access to a particular server,
you must allow host access to that server.
Caution: Host quarantine settings may conflict with settings in certain other software
running on the host computer — for example, software firewalls. For information on
configuring software on the host computer to avoid these conflicts, see
www.vmware.com/info?id=110.
Exit VMware ACE Manager if it is running, then use a text editor to add the host
policies to app.vmpl in the main folder for the project.
To enable the host quarantine feature you must add the following line to the file:
host.useZones = "1"
By default, the host is allowed full network access. The options to disable this default
are described below. Every host zone policy must start with the following lines:
host.zone.<zone_number>.present = "1"
host.zone.<zone_number>.key = "<zone_number>"
host.zone.<zone_number>.descriptionName = "<zone_name>"
The value of <zone_number> starts at zero and increments sequentially. The first
two host policy sections might start with sections similar to the following:
host.zone.0.present = "1"
host.zone.0.key = "0"
host.zone.0.descriptionName = "Eastern Regional Office"
host.zone.1.present = "1"
host.zone.1.key = "1"
host.zone.1.descriptionName = "Corporate HQ"
The value of key matches the zone number used as part of the parameter names in
each group.
The value of descriptionName must match the name specified in the zone
description you want to use. The number for <zone_number>, however, is
independent of the zone numbers in the zone description. The value of the zone
number in this section — the value of the host.zone parameter — determines the
order in which VMware ACE searches the zones for a match. When it finds a match, it
applies the policies defined for the zone with the same zone name and stops
searching.