Endpoint Protection

Hello:

We are attempting to deploy the Endpoint Protection SVAs to our vSphere 6 environment, which also runs NSX 6.2.2 Manager.  I've set up all of the options in "SVA_InstallSettings.xml" and am at the point of trying to install the OVA with the java installer (Symantec_SVA_Install.jar).  When I run the installer, I'm getting the error: "Unable to install SVA: Failed to connect to vShield Manager.".  I have verified that the credentials I'm using for NSX Manager are correct as I can authenticate to the web console with the same credentials.  I have also verified that in NSX Manager, the Guest Introspection component has been deployed to our ESXi hosts and shows as running.

What else could we be missing?  I've been through this same setup before on ESXi 5.5 and vShield Manager 5.x, using the same exact steps and it worked.  But in this case we are on newer ESXi and NSX Manager.  We are using the latest available version of Endpoint Protection (12.1.6 MP5) as well as the SVA installation files.

Thank you in advance for the help.

I had similar issue in the past - turned out to be a bad config file & incorrect sylink file. Double check the settings & config to ensure they are all correct.

Also this might be helpful.

https://support.symantec.com/en_US/article.howto81110.html

Hello and thank you for the reply.  Yes I have double checked everything several times, and ran through that checklist as well.  As I mentioned we went through this process previously with earlier versions of vCenter. ESXi, vShield Manager, etc, and I'm essentially doing the same thing as before.  I'm almost wondering at this point if there's some issue with NSX Manager and if they need to update the installer for it. I can't find any information saying that it supports NSX Manager vs. vShield Manager anywhere.
 

Mind you, I'm using 5.1, and I seems to recall someone else having similar issue with his 6.0 setup, so I am wondering if it'a related? I'm trying to find where I saw the post...

Found it

https://www.symantec.com/connect/forums/security-virtual-appliance-esxi-60

"We were considering setting up the Security Virtual Appliance to take advantage of the Shared Insight Cache.  However, we are using a ESXi 6.0 environment which looks to be unsupported according to the requirements. "

That might explain it.

Hope this helps.

See here:

https://www.symantec.com/connect/forums/using-symantec-security-virtual-appliance-non-persistent-vdis

Thank you, that's what I was looking for, even though it's not really good news.  We were prepping our virtual server environment for this as well as prepping to deploy VDI and I was really hoping that Endpoint Protection would continue to support vShield!  I do not want to necessarily use the network cache and put extra load on our network infrastructure when vShield gets around this and keeps all of that scanning traffic local to the ESXi host.  vShield to me seems the way to go, and is VMware's supported API for this, so I'm very disappointed that Symantec is dropping its support of that out of the blue.  Other products like TrendMicro use vShield and to me that is the way to go.

The frustrating part is that in another environment here we deployed the SVAs on ESXi 5.5 and upgraded to 6.0 later and it continues to work fine even with 12.1.6 MP5.  The problem is actually deploying the appliances to the hosts, seems like Symantec won't update the java installer to handle newer versions of vSphere.

Thanks again for the feedback, I've marked this solved.