vshield endpoint - wheres the AV??

[Comptx]

Hello, i just purchased Vmware Vshield endpoint license with hopes to protect my Virtual machines, but i am not sure what the next step is...

i have installed the vshield appliance on my ESXi, went to the Vshield tab, installed it on the ESXi host and installed the vshield agent on the Windows server VM. how do i know the computers are protected? the virtual appliance website list the VMs as unprotected. I am not sure what to do now?

[ldelloca]

Vshield Endpoint is not the Antivirus itself, it's an enabler to offload AV activities, letting specific AV products to interact with vmsafe libraries rather than being installed directly into the Virtual Machine.

Have never heard of Endpoint being an antivirus itself.

--

Luca Dell'Oca

http://www.vuemuer.it

@dellock6

vExpert 2011

[Assign points to a useful answer is a way to say thanks]

[Comptx]

so i would still need to buy an additional AV client?

[ldelloca]

Haven't you talked with your vmware partner before buying it? they would have known this....

Right now, vmsafe enabled antivirus are TrendMicro and McAfee. I know Symantec and Kasperski made announcement of "soon available" but for what I know their products are not available yet.

--

Luca Dell'Oca

http://www.vuemuer.it

@dellock6

vExpert 2011

[Assign points to a useful answer is a way to say thanks]

[JonathanG]

<full disclure, I work for Trend Micro>

Correct, the vmware endpoint is an enabler for antivirus protection. You need to buy A/V

(Lucca - to the best of my knowledge McAfee does not have an epsec enabled A/V solution)

[ldelloca]

Hi,

thanks for further explanation, I've read about McAfee on internet, have not tried to find the product. I'm fine with yours 🙂

Regards,

Luca.

--

Luca Dell'Oca

http://www.vuemuer.it

@dellock6

vExpert 2011

[Assign points to a useful answer is a way to say thanks]

[Comptx]

I have downloaded the Symantec endpoint 12.1. sales told me it integrates with the Vshield, but so far i have not been able to find any option for that at all

[ldelloca]

I'm scared it was a salesman telling it to you.

Maybe he/she has understood VMware? I think you must read carefully this thread on Symantec forum, there is some official reply by Symantec itself and is not good news for you.

http://www.symantec.com/connect/forums/sep-12-support-esx-andor-esxi

Show this thread to your sales rep and get us a feedback. I would be happy to see more vshield-anabled products...

Regards,

Luca.

--

Luca Dell'Oca

http://www.vuemuer.it

@dellock6

vExpert 2011

[Assign points to a useful answer is a way to say thanks]

[Comptx]

Well, i told the Symantec sales person i had vmware endpoint and i wanted to know which of their products integrates with Vshield endpoint to offload the AV scanning, etc. he pointed me to the 12.1 version of SEP.  But i guess that was incorrect.

What options do i have left? TrendMicro Deep Scan?

[ldelloca]

At the moment the only certified vshield endopoint antivirus is Trend Micro, but the right name and product is Deep Security, last version is 7.5.

Regards,

Luca.

--

Luca Dell'Oca

http://www.vuemuer.it

@dellock6

vExpert 2011

[Assign points to a useful answer is a way to say thanks]