SEP 12.1.2 Security Virtual Appliance (vShield Shared Insight Cache)

Created: 02 Nov 2012 | Updated: 06 Dec 2012 | 6 comments

Jay Long

This issue has been solved. See solution.

Hi,

Would anyone be able to shed any light on the difference between a standard network based Shared Insight Case setup and the new Security Virtual Appliance vShield based Shared Insight Cache?

I've not had a chance to evaluate is as part of the beta test so was wondering if it will provide any performance improvements over a normal standard cache.

Thanks

Discussion Filed Under:

Security, Endpoint Protection (AntiVirus) - 12.x, Endpoint Protection (AntiVirus), Features, Virtualization

Comments RSS Feed

Comments 6 Comments • Jump to latest comment

Brian81 Trusted Advisor

SEP 12.1.2 Security Virtual Appliance (vShield Shared Insight Cache) - Comment:02 Nov 2012 : Link

Here's a quick link on it:

http://www.symantec.com/business/support/index?page=content&pmv=print&impressions=&viewlocale=&id=HOWTO81121

The SIC can just be installed on a regular server where as the alternative is a VM appliance.

SEP Knowledge Base

Endpoint SWAT

SMLatCST Partner Accredited

SEP 12.1.2 Security Virtual Appliance (vShield Shared Insight Cache) - Comment:02 Nov 2012 : Link

Functionally it does the same thing, shares scan results. As far as I can tell, the main benefit of using the SVA version is the automatic coverage of guests when moving them between hosts, and not having to worry about the SIC generated network traffic.

Oh, and you save on a Windows license

http://www.cstl.com/

Jay Long

SEP 12.1.2 Security Virtual Appliance (vShield Shared Insight Cache) - Comment:02 Nov 2012 : Link

Thanks for the info. I've had a read through the KB articles relating to this new feature. We were hoping it would take more of the SEP client load and impact off the VM's. The documentation doesn't seem to be giviing much away as to whether this will be the case.

I'm assuming that somewhere along the line it will link in with the vShield Endpoint features in VMWare vSphere. That is documented here:

http://www.vmware.com/products/datacenter-virtuali...

Mithun Sanghavi Symantec Employee Technical Support Accredited

SEP 12.1.2 Security Virtual Appliance (vShield Shared Insight Cache) - Comment:02 Nov 2012 : Link

Hello,

I would suggest you to check the Topic 29 from the Symantec™ Endpoint Protection and Symantec Network Access Control 12.1.2 Installation and Administration Guide

http://www.symantec.com/business/support/index?page=content&id=DOC6153

It provide answers to all your questions related to your Question -

Installing a Security Virtual Appliance and using a vShield-enabled Shared Insight Cache
What do I need to do to use a vShield-enabled Shared Insight Cache?
What do I need to do to install a Security Virtual Appliance?
About the Symantec Endpoint Protection Security Virtual Appliance
VMware software requirements to install a Symantec Security Virtual Appliance
VMware software requirements for the Guest Virtual Machines
Configuring the Symantec Endpoint Protection Security Virtual Appliance installation settings file
Installing a Symantec Endpoint Protection Security Virtual Appliance
Enabling Symantec Endpoint Protection clients to use a vShield-enabled Shared Insight Cache
Stopping and starting the vShield-enabled Shared Insight Cache serviceService commands for the vShield-enabled Shared Insight Cache
Configuration file settings for a vShield-enabled Shared Insight Cache
About vShield-enabled Shared Insight Cache event logging
Uninstalling a Symantec Endpoint Protection Security Virtual Appliance

Also, check these Articles:

Knowledgebase Articles for Symantec Endpoint Protection 12.1. RU2

Knowledgebase Articles for Symantec Endpoint Protection SBE 12.1. RU2

Hope that helps!!

Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | MCTS | STS | ITIL v3

Twitter: @mithun_sanghavi

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<&a

SOLUTION

Jay Long

SEP 12.1.2 Security Virtual Appliance (vShield Shared Insight Cache) - Comment:02 Nov 2012 : Link

Thanks. It appears an SVA provides no extra benefits over a network based Shared Insight Cache other than removing the load from the network. With an SVA type Shared Insight Cache you have one setup on each VM host.

Mithun Sanghavi Symantec Employee Technical Support Accredited

SEP 12.1.2 Security Virtual Appliance (vShield Shared Insight Cache) - Comment:22 Nov 2012 : Link

Hello,

Check these Articles which would assist you -

Using Symantec Endpoint Protection in non-persistent virtual desktop infrastructures

http://www.symantec.com/docs/HOWTO81133

What do I need to do to use a vShield-enabled Shared Insight Cache?

http://www.symantec.com/docs/HOWTO81121

What do I need to do to install a Security Virtual Appliance?

http://www.symantec.com/docs/HOWTO81110

Hope that helps!!

Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | MCTS | STS | ITIL v3

Twitter: @mithun_sanghavi

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<&a

SEP 12.1.2 Security Virtual Appliance (vShield Shared Insight Cache)

Comments 6 Comments • Jump to latest comment

Would you like to reply?

Links