Critical System Protection

How does Symantec Critical System Protection work with virtual machines? 

In a  typical VM layout where a physical server is installed and is running an OS, and a hyperrvisor manages the VMs (see diagram)

(VMs) OS | OS | OS | OS
HYPERVISOR
OS
PHYSICAL SERVER

How does Symantec Critical System Protection work with these machines in regards to application control? Do you install it on the underlying OS and manage the VMs through the hypervisor? Or do you have to install it on each individual VM?

Thankyou,

Kimberley

Symantec Data Center Security: Server v6.0 (DCS: Server)
Optimizes the deployment of threat protection services by providing agentless anti-virus for virtualized servers. By leveraging VMware Endpoint Service and VMWare NSX platform extensibility with Service Composer integration, Symantec supports the automated provisioning of its security virtual appliances (SVA) and orchestration of policy to protect virtual machines without in-guest agents. Click here for more info

Symantec Data Center Security: Server Advanced v6.0 (DCS: Server Advanced)
Extends the Data Center Security: Server solution beyond agentless threat protections by incorporating technologies previous known as Critical System Protection. Data Center Security: Server Advanced provides granular, policy-based controls with a low impact in-guest agent to monitor and protect numerous physical and virtual server environments. Through a combination of technologies including application-centric controls including protected white listing, sandboxing using least privilege access controls, host-based intrusion detection (HIDS) and prevention (HIPS), and real-time file integrity monitoring (FIM), organizations can proactively safeguard their heterogeneous server environments and the information they contain from zero-day and targeted attacks, and fulfill their compliance mandates across critical systems. Click here for more info

See here:

https://www-secure.symantec.com/connect/forums/announcing-data-center-security-server-server-advanced-products

http://www.symantec.com/business/support/index?page=landing&key=63068

Kimberley,

To answer your question directly...

In regards to application control, you would install the CSP agent on each of the inividual VM's.

Hope this helps.

Regards
Will