Why do my VirtualBox VMs end up merged into a single asset?

Modified on Thu, Nov 2, 2023 at 9:28 AM

If you run multiple virtual machines in VirtualBox and bridge them using a WiFi network connection, they are likely to end up merged into a single asset.

The reason for this is that it's not possible to bridge a WiFi connection the way you can bridge an ethernet connection, because WiFi connections can only support a single MAC address. VirtualBox works around this by using a firewall packet filter to route data to the appropriate VM when it's received. When data is sent from the VMs, the packet filter is set up to make the VM masquerade as the host system, with the host system's MAC. 

So to an external scanner like runZero, all the VMs seem to share the same MAC, and they get merged into a single asset.

This is not a problem if the VMs are bridged to an ethernet adapter.

Was this article helpful?

That’s Great!

Thank you for your feedback

Sorry! We couldn't be helpful

Thank you for your feedback

Let us know how can we improve this article!

Select at least one of the reasons
CAPTCHA verification is required.

Feedback sent

We appreciate your effort and will try to fix the article