Endpoint Protection

Hi,

Would anyone be able to shed any light on the difference between a standard network based Shared Insight Case setup and the new Security Virtual Appliance vShield based Shared Insight Cache?

I've not had a chance to evaluate is as part of the beta test so was wondering if it will provide any performance improvements over a normal standard cache.

Thanks

Here's a quick link on it:

http://www.symantec.com/business/support/index?page=content&pmv=print&impressions=&viewlocale=&id=HOWTO81121

The SIC can just be installed on a regular server where as the alternative is a VM appliance.

Functionally it does the same thing, shares scan results.  As far as I can tell, the main benefit of using the SVA version is the automatic coverage of guests when moving them between hosts, and not having to worry about the SIC generated network traffic.

Oh, and you save on a Windows license 

Thanks for the info. I've had a read through the KB articles relating to this new feature. We were hoping it would take more of the SEP client load and impact off the VM's. The documentation doesn't seem to be giviing much away as to whether this will be the case.

I'm assuming that somewhere along the line it will link in with the vShield Endpoint features in VMWare vSphere. That is documented here:

http://www.vmware.com/products/datacenter-virtualization/vsphere/endpoint.html

Hello,

I would suggest you to check the Topic 29 from the Symantec™ Endpoint Protection and Symantec Network Access Control 12.1.2 Installation and Administration Guide

http://www.symantec.com/business/support/index?page=content&id=DOC6153

It provide answers to all your questions related to your Question - 

• Installing a Security Virtual Appliance and using a vShield-enabled Shared Insight Cache
• What do I need to do to use a vShield-enabled Shared Insight Cache?
• What do I need to do to install a Security Virtual Appliance?
• About the Symantec Endpoint Protection Security Virtual Appliance
• VMware software requirements to install a Symantec Security Virtual Appliance
• VMware software requirements for the Guest Virtual Machines
• Configuring the Symantec Endpoint Protection Security Virtual Appliance installation settings file
• Installing a Symantec Endpoint Protection Security Virtual Appliance
• Enabling Symantec Endpoint Protection clients to use a vShield-enabled Shared Insight Cache
• Stopping and starting the vShield-enabled Shared Insight Cache serviceService commands for the vShield-enabled Shared Insight Cache
• Configuration file settings for a vShield-enabled Shared Insight Cache
• About vShield-enabled Shared Insight Cache event logging
• Uninstalling a Symantec Endpoint Protection Security Virtual Appliance

Also, check these Articles:

Knowledgebase Articles for Symantec Endpoint Protection 12.1. RU2

Knowledgebase Articles for Symantec Endpoint Protection SBE 12.1. RU2

Hope that helps!!

Thanks. It appears an SVA provides no extra benefits over a network based Shared Insight Cache other than removing the load from the network. With an SVA type Shared Insight Cache you have one setup on each VM host.

Hello,

Check these Articles which would assist you - 

Using Symantec Endpoint Protection in non-persistent virtual desktop infrastructures

http://www.symantec.com/docs/HOWTO81133

What do I need to do to use a vShield-enabled Shared Insight Cache?

http://www.symantec.com/docs/HOWTO81121

What do I need to do to install a Security Virtual Appliance?

http://www.symantec.com/docs/HOWTO81110

Hope that helps!!