Vshield Endpoint Events And Alarms; View Vshield Endpoint Status - VMware VSHIELD APP 1.0.0 UPDATE 1 Admin Manual

14

vShield Endpoint Events and Alarms

vShield Endpoint delivers an introspection-based antivirus solution. vShield Endpoint uses the hypervisor to
scan guest virtual machines from the outside without a bulky agent. vShield Endpoint is efficient in avoiding
resource bottlenecks while optimizing memory use.
vShield Endpoint health status is conveyed by using alarms that show in red and yellow on the vCenter Server
console. In addition, more status information can be gathered by looking at the event logs.
I Your vCenter Server must be correctly configured for vShield Endpoint security:
MPORTANT
Not all guest operating systems are supported by vShield Endpoint. Virtual machines with non-supported

operating systems are not protected by the security solution.
 All virtual machines (with supported operating systems) that reside on a vShield Endpoint-protected ESX
host must be protected by a vShield Endpoint module.
Not all ESX hosts in a vCenter Server must be protected by the security solution, but each protected ESX

must have an SVM installed on it.
C vMotion migration of a protected virtual machine are blocked if the target ESX is not enabled for
AUTION
vShield Endpoint. Make sure that the resource pool for vMotion of protected virtual machines contains only
security enabled ESX hosts.
This chapter includes the following topics:


"View vShield Endpoint Status"


"Alarms" on page 80

"Events" on page 81

"Audit Messages"
View vShield Endpoint Status
Monitoring a vShield Endpoint instance involves checking for status coming from the vShield Endpoint
components: the security virtual machine (SVM), the ESX host-resident vShield Endpoint module, and the
protected virtual machine-resident thin agent.
To view vShield Endpoint status
1 In the vSphere Client, go to Inventory > Hosts and Clusters.
2 Select a datacenter, cluster, or ESX host resource from the resource tree.
3 Click the vShield App tab (or vShield tab on ESX hosts).
4 Click Endpoint Status.
VMware, Inc.
on page 79
on page 84
14
79