You can customize many of the essential security settings for your host through the Security Profile panel available in the
vSphere Web Client. The Security Profile is especially useful for single host management. If you are managing multiple hosts, consider using one of the CLIs or SDKs and automating the customization.
ESXi Firewall Configuration ESXi includes a firewall that is enabled by default.
Customizing ESXi Services from the Security Profile An ESXi host includes several services that are running by default. You can disable services from the security profile, or enable services a if company policy allows it.
Enable or Disable a Service in the Security Profile You can enable or disable one of the services listed in the Security Profile from the vSphere Web Client.
Lockdown Mode To increase the security of your ESXi hosts, you can put them in lockdown mode. In lockdown mode, operations must be performed through vCenter Server by default.
Manage the Acceptance Levels of Hosts and VIBs The acceptance level of a VIB depends on the amount of certification of that VIB. The acceptance level of the host depends on the level of the lowest VIB. You can change the acceptance level of the host if you want to allow lower-level VIBs. You can remove CommunitySupported VIBs to be able to change the host acceptance level.