After installation of all components is complete, do the following:
vShield App: At this point, vShield App installation is complete. Each vShield App inherits global
firewall rules set in the vShield Manager. The default firewall rule set allows all traffic to pass. You must
configure blocking rules to explicitly block traffic. To configure App Firewall rules, see "Configuring
Firewall Rules for a vCenter Container" on page 53.
Port Group Isolation: You must enable the Port Group Isolation feature on each vDS. After enablement
is complete, install a vShield Edge on each port group. See "vNetwork Preparation and vShield Edge
Installation" on page 21.
vShield Endpoint: To complete installation, see "vShield Endpoint Management" on page 63.
You can install a single service by identifying only that service in the POST body. In Example
App is installed, as identified by inclusion of the VszInstallParams element only.
Example 3-2. Installing a vShield App Only
Request:
POST <vshield_manager-uri>/api/1.0/vshield/<host-moid>/vsz
Example:
POST /api/1.0/vshield/host-5126 HTTP/1.1
Content-type: application/xml; charset=UTF-8
Authorization: Basic YWRtaW46ZGVmYXVsdA==
Cache-Control: no-cache
Pragma: no-cache
Host: 10.112.196.244
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Connection: keep-alive
Content-Length: 368
<VshieldConfiguration><VszInstallParams><DatastoreId>datastore-5131</DatastoreId><ManagementPortS
Get the Installation Status of vShield Services on an ESX Host
You can retrieve the installation or uninstallation status of vShield services on an ESX host to track progress as
complete or not initiated. If neither of these operations is in progress, the response includes the list of installed
services on the ESX host.
Example 3-3. Getting vShield Service Installation Status on an ESX Host
Request:
GET <vshield_manager-uri>/api/1.0/vshield/<host-moid>
VMware, Inc.
witchId>network-5134</ManagementPortSwitchId><MgmtInterface><IpAddress>10.112.196.
245</IpAddress><NetworkMask>255.255.252.0</NetworkMask><DefaultGw>10.112.199.253</
DefaultGw></MgmtInterface></VszInstallParams><InstallAction>install</InstallAction
></VshieldConfiguration>
Chapter 3 ESX Host Preparation for vShield App, Endpoint, and Isolation
3‐2, only vShield
19
Need help?
Do you have a question about the VSHIELD APP 1.0 - API and is the answer not in the manual?
Questions and answers