What do I need to do to install a Security Virtual Appliance?
A vShield-enabled Shared Insight Cache runs in a Symantec Endpoint Protection Security Virtual Appliance. You must install the appliance so that Windows-based Guest Virtual Machines (GVMs) can use VMware vShield Endpoint to access the Shared Insight Cache.
Symantec supports the use of the Security Virtual Appliance only in VMware ESX/ESXi infrastructures.
Table: Tasks that you need to perform to install a Symantec Endpoint Protection Security Virtual Appliance
Install and configure the prerequisite VMware software that you need.
See VMware software requirements to install a Symantec Security Virtual Appliance.
For information about how to install and configure VMware software, refer to your VMware documentation.
Download the following files from FileConnect, at the following location:
The Symantec Endpoint Protection Tools installation file
Extract the contents of the .exe file. Locate the
Endpoint Protection Security Virtual Appliance .ova
If you download the .ova file using Internet Explorer, the file is saved with a .man or .tar extension. You must rename the file with an .ova extension.
Copy the entire contents of the
SecurityVirtualAppliance folder to a local directory. For convenience, save the .ova file to the same local directory.
To access FileConnect, you need to have
the activation serial number that is part of your license certificate.
In Symantec Endpoint Protection Manager, export the communication settings file (
sylink.xml) from the client group that you plan to use for your Guest Virtual Machines (GVMs). You must have this file to install the Security Virtual Appliance.
Symantec recommends using the default communications settings of a heartbeat interval and randomization interval of 5 minutes each when you use the Security Virtual Appliance. If the group sylink.xml uses a longer interval, such as a one-hour heartbeat and a four-hour randomization, it could delay reporting for that group. You should export the sylink.xml for the Security Virtual Appliance before adjusting the communication settings for the virtual machine group.
For convenience, save the
sylink.xml file to the same local directory as the .ova file and the
SecurityVirtualAppliance folder contents.
The default name of the communications file that you exported from Symantec Endpoint Protection Manager is
See Exporting the client-server communications file (Sylink.xml) manually.
Update the installation settings file with the information that the installation executable requires to install the Security Virtual Appliance on the ESXi host.
See Configuring the Symantec Endpoint Protection Security Virtual Appliance installation settings file.
Install the Security Virtual Appliance on the ESX/ESXi host.
See Installing a Symantec Endpoint Protection Security Virtual Appliance.
After you install a Security Virtual Appliance, you can enable a vShield-enabled Shared Insight Cache for your GVMs to use.
See What do I need to do to use a vShield-enabled Shared Insight Cache?.