Client And User Access; Deployment Considerations; Preparing Virtual Machines For Vshield Protection - VMware VSHIELD APP 1.0.0 UPDATE 1 Quick Start Manual

vShield Quick Start Guide

VMware ESX 4.0 Update 1 or later for each server
N vShield Endpoint requires ESX 4.1 or later.
OTE
Table 2-3 lists the ESX and ESXi versions that are compatible with this version of vShield.
Table 2-3. Supported ESX and ESXi Versions
ESX or ESXi Release
4.0 Update 1
4.1 GA

VMare vCloud Director 1.0
Table 2-4 lists the vCloud Director versions that are compatible with this version of vShield.
Table 2-4. Supported vCloud Director Versions
vCloud Director Release
1.0

Client and User Access


PC with the VMware vSphere Client

Permissions to add and power on virtual machines

Access to the datastore where you store virtual machine files, and the account permissions to copy files to
that datastore

Enable cookies on your Web browser to access the vShield Manager user interface

Connect to the vShield Manager using one of the following supported Web browsers:

Internet Explorer 6.x and later

Mozilla Firefox 1.x and later

Safari 1.x or 2.x

Deployment Considerations

Consider the following recommendations and restrictions before you deploy vShield components.

Preparing Virtual Machines for vShield Protection

You must determine how to protect your virtual machines with vShield. Consider the following questions:
How Are My Virtual Machines Grouped?
You might consider moving virtual machines to port groups on a vDS or a different ESX host to group virtual
machines by function, department, or other organizational need to improve security and ease configuration of
access rules. You can install vShield Edge at the perimeter of any port group to isolate virtual machines from
the external network. You can install a vShield App on an ESX host and configure firewall policies per
container resource to enforce rules based on the hierarchy of resources.
Are My Virtual Machines Still Protected if I vMotion Them to Another ESX Host?
Yes, if you install a vShield App on each ESX host in a cluster, you can migrate machines between hosts without
weakening the security posture. vShield App instances cannot be migrated to other hosts, thus each instance
maintains state for existing sessions.
14
Build Number
208167
260247
Build Number
285979
VMware, Inc.