Video Screencast Help

Installing SEP 12.1 and VIE to Unidesk as application layer

Created: 22 Jan 2013 | 5 comments

We're trying to implement a VDI solution using Unidesk and VMware.  For anyone unfamiliar with this product, there's an "OS Layer" and separate "Applications Layers" for each app you wish to add.  Unidesk support forums recommend adding SEP as an application layer.  Every time I install it, the software runs extremely slowly.  I try to setup the VIE tool, but I get thousands of "Failed to set bit" errors.

I saw one posting from someone back in 2011 with my exact situation but no solution was ever posted.

Unidesk posted just last week that 12.1.2 is not supported so I've contacted Symantec to see how to get 12.1 RU1 MP1 b/c the only version I can get from FileConnect at this moment is 12.1.2.

While I'm waiting, I thought I'd post the question here to see if anyone has tried this in the last year or so. I followed all the steps in to setup SEP and VIE but it didn't go very well.  I'm hoping 12.1 will behave better.

In the meantime, I await any words of advice from you all.


Comments 5 CommentsJump to latest comment

ᗺrian's picture

Do you have all 3 components installed?

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

RhoSysAdmin's picture

By that, do you mean the Antivirus, Firewall, and NPS?  The answer would be know.  I'm not enabling the firewall, choosing instead to let Windows stay in control of its own firewall. 

SMLatCST's picture

The closest I can come up with is the below article which is focussed on Symantec's own software virtualisation technology (Workspace) and SEP11:

These settings essentially tell Workspace to let the SEP processess access the disk directly and not go through the filters.  Presumably your app virtualisatiob software has a similar function.

Combine that with the main precesses used in SEP 12.1 and you should get better performance.  I think the largest change is that ccSvcHst.exe replaces RTVScan.exe.

SMLatCST's picture

On a different note, it seems strange to me to ever want to push out your AV as a virtualised application.  

AV should be on every machine in your environment, and generally doesn't meet the criteria people use for choosing if an app should be virtualised.

Plus, because AV should have access to every area of your endpoint, do you really want to pop it in a virtual layer?  What's the filter exception going to do to it?

While (as my linked post states) it's fine to have SEP installed on the same machine as one running a applciation virtualisation product, I'd personally recommend against putting it in a virtual layer.