Architecting a vSphere Compute Platform : Designing Host Security for Multitenanted Clouds : 10.9 ESXi Firewall
   
10.9 ESXi Firewall
Since the release of vSphere 5, the ESXi hypervisor has included a firewall that is enabled by default to only allow the incoming and outgoing connections that are necessary for managing virtual machines. The ESXi firewall allows for low-level control over network access, provides the ability to restrict access to specific network segments, and is centrally configurable through host profiles to reduce the operational overhead of managing changes globally within the virtual infrastructure.