Endpoint Protection

HI @all

In a customers environment we are currently migrating from fat-clients to VDI with VMware View. VMware officially doesn't recommends to install any modules further than the core antivirus software:

http://www.vmware.com/files/pdf/VMware-View-AntiVirusPractices-TN-EN.pdf

(We have to go with the installed agent installed on the virtual machine than to install the SEP virtual module.)

For highest security needs, what is the official recommendations by symantec to install on the virtual machines? And what are the experiances of the IPS nad FW modules on the VDIs from other customers perspective?

Thanks for your help.

Regards

Hello,

Check these Articles:

Symantec Endpoint Protection 12.1 - Virtualization Best Practices

http://www.symantec.com/docs/TECH173650

Symantec Endpoint Protection 12.1 - Non-persistent Virtualization Best Practices

http://www.symantec.com/docs/TECH180229

Symantec Endpoint Protection 12.1 & Virtualization

http://www.symantec.com/docs/TECH194383

Using Symantec Endpoint Protection in virtual infrastructures

http://www.symantec.com/docs/HOWTO8106

Does Symantec Endpoint Protection 12.1 support VMWare vShield?

http://www.symantec.com/docs/TECH175568

SEP 12.1.2 Best Practices on Citrix Virtual Desktops ( Provisioning Services) -Part 1

https://www-secure.symantec.com/connect/articles/sep-1212-best-practices-citrix-virtual-desktops-provisioning-services-part-1

SEP 12.1.2 Best Practices on Citrix Virtual Desktops ( Provisioning Services) -Part 2

https://www-secure.symantec.com/connect/articles/sep-1212-best-practices-citrix-virtual-desktops-provisioning-services-part-2

Hope that helps!!

Here's a good start

http://www.symantec.com/docs/TECH173650

Hi,

Thank you for posting in Symantec community.

The protection technologies in Symantec Endpoint Protection Manager and Symantec Endpoint Protection typically function the same way in virtual infrastructures as they do in physical infrastructures. You can install, configure, and use Symantec Endpoint Protection Manager and Symantec Endpoint Protection clients in virtual infrastructures in the same way as in physical infrastructures.

If you are running a non-persistent VDI setup then you should consider the following additional items.

You can then configure a separate purge interval in Symantec Endpoint Protection for the offline guest virtual machines (GVMs) in non-persistent virtual desktop infrastructures. Symantec Endpoint Protection Manager removes the non-persistent GVM clients that have been offline longer than the specified time period. This feature makes it simpler to manage the non-persistent GVMs in Symantec Endpoint Protection Manager.

Symantec Endpoint Protection 12.1 - Non-persistent Virtualization Best Practices

http://www.symantec.com/docs/TECH180229

Supported virtual installations and virtualization products

http://www.symantec.com/docs/HOWTO55136

Check the attached PDF also.

Attachment(s)

SEP_12.1.2_Virtualization_Best_Practices.pdf   1.91 MB 1 version