1.0

www.vmware.com
240
VMware ACE Administrator’s Manual
Defining Guest Policies
If you want to enforce different network quarantine policies in the guest operating
system based on the network zone to which the host computer is attached, you must
use a text editor to make changes in the virtual machine’s policy file —
<vmname>.vmpl in the affected virtual machine’s folder inside the project folder.
Take the following steps:
1. Before editing <vmname>.vmpl, launch the Network Quarantine Wizard from
the policy editor and set the network quarantine policies you want to apply to
the virtual machine when it is connected to zone 0. Be sure to select Static
quarantine. For step-by-step instructions on using the Network Quarantine
Wizard, see Setting Network Quarantine Policies on page 85.
2. Exit VMware ACE Manager, then open <vmname>.vmpl in your text editor.
3. To enable the zones feature for a virtual machine, find the line that begins with
guest.useZones and change it to the following:
guest.useZones = "1"
4. Add a set of lines for the zone, specified in a manner similar to that used to
define host policies. For zone 0, add the following lines:
guest.zone.0.present = "1"
guest.zone.0.key = "0"
guest.zone.0.descriptionName = "<zone_name>"
The value of descriptionName must match the name specified in the zone
description you want to use. The number for <zone_number>, however, is
independent of the zone numbers in the zone description. The value of the zone
number in this section — the value of the guest.zone parameter —
determines the order in which VMware ACE searches the zones for a match.
When it finds a match, it applies the guest quarantine policies defined for the
zone with the same zone name and stops searching.
This approach allows you to specify the guest zones in a different order from that
in the list of zone descriptions.
5. Find the set of lines beginning with quarantine. and make a copy of the
entire block of lines. These may include lines beginning with one or more of the
following:
quarantine.configurationBlock
quarantine.networkSettings
quarantine.webFile
quarantine.httpRoot