VMware VSHIELD APP 1.0.0 UPDATE 1 - API, Руководство администратора

Страница: 79 / 144

VMware, Inc. 79
14
vShield Endpoint delivers an introspection-based antivirus solution. vShield Endpoint uses the hypervisor to
scan guest virtual machines from the outside without a bulky agent. vShield Endpoint is efficient in avoiding
resource bottlenecks while optimizing memory use.
vShield Endpoint health status is conveyed by using alarms that show in red and yellow on the vCenter Server
console. In addition, more status information can be gathered by looking at the event logs.
This chapter includes the following topics:

“View vShield Endpoint Status” on page 79

“Alarms” on page 80

“Events” on page 81

“Audit Messages” on page 84
View vShield Endpoint Status
Monitoring a vShield Endpoint instance involves checking for status coming from the vShield Endpoint
components: the security virtual machine (SVM), the ESX host-resident vShield Endpoint module, and the
protected virtual machine-resident thin agent.
To view vShield Endpoint status
1 In the vSphere Client, go to Inventory > Hosts and Clusters .
2 Select a datacenter, cluster, or ESX host resource from the resource tree.
3 Click the vShield App tab (or vShield tab on ESX hosts).
4 Click Endpoint Status .
vShield Endpoint Events and Alarms
14
I
MPORTANT
Your vCenter Server must be correctly configured for vShield Endpoint security:

Not all guest operating systems are supported by vShield Endpoint. Virtual machines with non-supported
operating systems are not protected by the security solution.

All virtual machines (with supported operating systems) that reside on a vShield Endpoint-protected ESX
host must be protected by a vShield Endpoint module.

Not all ESX hosts in a vCenter Server must be protected by the security solution, but each protected ESX
must have an SVM installed on it.
C
AUTION
vMotion migration of a protected virtual machine are blocked if the target ESX is not enabled for
vShield Endpoint. Make sure that the resource pool for vMotion of protected virtual machines contains only
security enabled ESX hosts.