VMware VSHIELD MANAGER 4.1 - User Manual download pdf (Page 5)

How does scanning work?

When a guest VM tries to access a file:

■

A vShield Endpoint Thin Agent running on the VM notifies the Sophos security VM.

■

The security VM scans the file, if the file has changed or if a detection update has occurred

since the file was last scanned.

■

If the security VM detects a threat, access to the file is blocked, and the security VM sends an

alert to Enterprise Console.

The security VM can also perform a full scan of all the guest VMs. In this case:

■

The security VM schedules scans so as to ensure that the ESXi host is not placed under a high

load.

■

If the security VM detects a threat, it sends an alert to Enterprise Console.

How is the security VM managed?

Enterprise Console displays the status of the security VM, including how up to date it is and

whether it has detected any threats.

Enterprise Console also enables you to configure scanning by means of a policy.

How do you deal with threats?

Depending on the threat that has been detected and the damage that it has caused, you can:

■

Delete the affected guest VM and reclone it from the template image.

■

Revert the affected guest VM to the previous known clean snapshot.

■

Use the free Sophos Virus Removal Tool.

■

Use Sophos Endpoint Security and Control for Windows.

How is the security VM updated?

Enterprise Console keeps the security VM updated.

Enterprise Console downloads the latest software updates, threat data, and threat detection engine

from Sophos and puts them in a network share. The security VM automatically fetches updates

from there.

When Sophos releases a major new version of the security VM, you can upgrade as described in

the Sophos Anti-Virus for VMware vShield upgrade guide.

3 Key steps in installation

Installation involves these key steps, which are described in the sections that follow:

■

Check the system requirements.

startup guide

1 2 3 4 5 6 7 8 9 10 ... 55 56

No comments

VMware VSHIELD MANAGER 4.1 - User Manual Page 5