Endpoint Protection

We're trying to implement a VDI solution using Unidesk and VMware.  For anyone unfamiliar with this product, there's an "OS Layer" and separate "Applications Layers" for each app you wish to add.  Unidesk support forums recommend adding SEP as an application layer.  Every time I install it, the software runs extremely slowly.  I try to setup the VIE tool, but I get thousands of "Failed to set bit" errors.

I saw one posting from someone back in 2011 with my exact situation but no solution was ever posted.

Unidesk posted just last week that 12.1.2 is not supported so I've contacted Symantec to see how to get 12.1 RU1 MP1 b/c the only version I can get from FileConnect at this moment is 12.1.2.

While I'm waiting, I thought I'd post the question here to see if anyone has tried this in the last year or so. I followed all the steps in  

http://www.symantec.com/docs/HOWTO81031 to setup SEP and VIE but it didn't go very well.  I'm hoping 12.1 will behave better.

In the meantime, I await any words of advice from you all.

Thanks.

Do you have all 3 components installed?

By that, do you mean the Antivirus, Firewall, and NPS?  The answer would be know.  I'm not enabling the firewall, choosing instead to let Windows stay in control of its own firewall. 

The closest I can come up with is the below article which is focussed on Symantec's own software virtualisation technology (Workspace) and SEP11:

http://www.symantec.com/docs/TECH94157

These settings essentially tell Workspace to let the SEP processess access the disk directly and not go through the filters.  Presumably your app virtualisatiob software has a similar function.

Combine that with the main precesses used in SEP 12.1 and you should get better performance.  I think the largest change is that ccSvcHst.exe replaces RTVScan.exe.

On a different note, it seems strange to me to ever want to push out your AV as a virtualised application.  

AV should be on every machine in your environment, and generally doesn't meet the criteria people use for choosing if an app should be virtualised.

Plus, because AV should have access to every area of your endpoint, do you really want to pop it in a virtual layer?  What's the filter exception going to do to it?

While (as my linked post states) it's fine to have SEP installed on the same machine as one running a applciation virtualisation product, I'd personally recommend against putting it in a virtual layer.

A SEP12.1 with Workspace article here:

http://www.symantec.com/docs/TECH189328

#EDIT#

And another:

http://www.symantec.com/docs/HOWTO77262