A method is provided for managing a network storm associated with a physical port of a physical switch. The method, performed by a management application, includes receiving a notification of the network storm associated with the physical port, identifying a virtual switch supported by a server host that is coupled to the physical port, identifying a virtual machine coupled to the virtual switch that causes the network storm, and isolating the identified virtual machine while the physical port remains enabled.