Hello Nutanix Community,

As part of our ongoing migration to the Nutanix environment, we are planning to conduct a penetration test and other security assessments to ensure that our infrastructure is secure. I was wondering if anyone here has experience conducting penetration tests or any other forms of security testing (e.g., vulnerability assessments, risk analysis) specifically on Nutanix environments.

If so, I would greatly appreciate any guidance, insights, or best practices you can share, particularly related to the following:

• Key areas that are important to focus on when testing Nutanix systems (e.g., AOS, AHV, Prism).
• Any tools or frameworks you have used for penetration testing on Nutanix environments.
• Common vulnerabilities or security concerns that you’ve come across in Nutanix systems.
• Recommendations for test configurations or specific testing approaches (e.g., black-box vs. white-box testing).
• Any documentation or resources that helped you prepare for the tests.

Additionally, if you have any tips on working with Nutanix’s security features (e.g., encryption, firewall rules, identity management) during the testing phase, that would be helpful as well.

I’m looking forward to hearing about your experiences and learning from your insights.

Thank you in advance for your help!