How to disable all guest networking

[MAFS77]

Hi,

For security reasons we would like to disable all VM guest networking but leaving just USB.
Even if installing VirtualBox without Brigde and Host networking, NAT is always active and this way a user can reach internal network.
Is there any way to accomplish this?

Thanks.

[towo2099]

Remove the virtualized networkcard from the vm settings.

[socratis]

Or disconnect its cable...

[MAFS77]

Remove? You mean disabling "Enable Network Adapter" 1, 2, 3 or 4
A simple user can activate it again, and NAT is still available.

[MAFS77]

Or disconnect its cable...

That will do it , but they still need to access internal network from host machine.

[socratis]

A simple user can activate it again

What simple user?

they still need to access internal network from host machine

1) You said no networking, 2) Who's "they"?

Why don't you describe in detail what you want to do, instead of what you think you want to do...

[MAFS77]

Why don't you describe in detail what you want to do, instead of what you think you want to do...

Sure.
I have here some users that need to run a Virtualbox VM on their machines and I don't want the VMs to have access to the internal network, not even the host.
Just USB access will be sufficient.
From the tests that did, an clean install of VirtualBox without Bridge or Host only interfaces will have access to the internal network if NAT is enabled for the virtual network interface.
Do you know any way to disable NAT availability to the VM?

Thanks.
Marco

[mpack]

Do you know any way to disable NAT availability to the VM?

The answers to that were already given above. NAT is enabled by default, but you can easily turn it off.

[socratis]

I have here some users that need to run a Virtualbox VM on their machines and I don't want the VMs to have access to the internal network, not even the host.

You can't stop them. If a user can run a VM, said user can modify a VM and its settings. And they can enable or disable NAT at will. And NAT (along with NATservice), *has* access to your LAN resources.

Do you know any way to disable NAT availability to the VM?

Nope. Not there. Can't do. VirtualBox can't be locked in the way that you think, you got to trust your users to not enable that, but you can't enforce it.

There are some things you can lock down, but not a man that knows their way around. For more details see ch. 9.19 Locking Down the Oracle VM VirtualBox GUI.

[MAFS77]

Thanks for your answer.
May be a feature in the future.