Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

SEP 12.1.2 Security Virtual Appliance (vShield Shared Insight Cache)

Created: 02 Nov 2012 • Updated: 06 Dec 2012 | 6 comments
This issue has been solved. See solution.

Hi,

Would anyone be able to shed any light on the difference between a standard network based Shared Insight Case setup and the new Security Virtual Appliance vShield based Shared Insight Cache?

I've not had a chance to evaluate is as part of the beta test so was wondering if it will provide any performance improvements over a normal standard cache.

Thanks

Comments 6 CommentsJump to latest comment

.Brian's picture

Here's a quick link on it:

http://www.symantec.com/business/support/index?page=content&pmv=print&impressions=&viewlocale=&id=HOWTO81121

The SIC can just be installed on a regular server where as the alternative is a VM appliance.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

SMLatCST's picture

Functionally it does the same thing, shares scan results.  As far as I can tell, the main benefit of using the SVA version is the automatic coverage of guests when moving them between hosts, and not having to worry about the SIC generated network traffic.

Oh, and you save on a Windows license wink

Jay Long's picture

Thanks for the info. I've had a read through the KB articles relating to this new feature. We were hoping it would take more of the SEP client load and impact off the VM's. The documentation doesn't seem to be giviing much away as to whether this will be the case.

I'm assuming that somewhere along the line it will link in with the vShield Endpoint features in VMWare vSphere. That is documented here:

http://www.vmware.com/products/datacenter-virtuali...

Mithun Sanghavi's picture

Hello,

I would suggest you to check the Topic 29 from the Symantec™ Endpoint Protection and Symantec Network Access Control 12.1.2 Installation and Administration Guide

http://www.symantec.com/business/support/index?page=content&id=DOC6153

It provide answers to all your questions related to your Question - 

  • Installing a Security Virtual Appliance and using a vShield-enabled Shared Insight Cache
  • What do I need to do to use a vShield-enabled Shared Insight Cache?
  • What do I need to do to install a Security Virtual Appliance?
  • About the Symantec Endpoint Protection Security Virtual Appliance
  • VMware software requirements to install a Symantec Security Virtual Appliance
  • VMware software requirements for the Guest Virtual Machines
  • Configuring the Symantec Endpoint Protection Security Virtual Appliance installation settings file
  • Installing a Symantec Endpoint Protection Security Virtual Appliance
  • Enabling Symantec Endpoint Protection clients to use a vShield-enabled Shared Insight Cache
  • Stopping and starting the vShield-enabled Shared Insight Cache serviceService commands for the vShield-enabled Shared Insight Cache
  • Configuration file settings for a vShield-enabled Shared Insight Cache
  • About vShield-enabled Shared Insight Cache event logging
  • Uninstalling a Symantec Endpoint Protection Security Virtual Appliance

Also, check these Articles:

Knowledgebase Articles for Symantec Endpoint Protection 12.1. RU2

Knowledgebase Articles for Symantec Endpoint Protection SBE 12.1. RU2

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

SOLUTION
Jay Long's picture

Thanks. It appears an SVA provides no extra benefits over a network based Shared Insight Cache other than removing the load from the network. With an SVA type Shared Insight Cache you have one setup on each VM host.

Mithun Sanghavi's picture

Hello,

Check these Articles which would assist you - 

Using Symantec Endpoint Protection in non-persistent virtual desktop infrastructures

http://www.symantec.com/docs/HOWTO81133

What do I need to do to use a vShield-enabled Shared Insight Cache?

http://www.symantec.com/docs/HOWTO81121

What do I need to do to install a Security Virtual Appliance?

http://www.symantec.com/docs/HOWTO81110

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.