Which components are supported within virtualized environments?

book

Article ID: 160700

calendar_today

Updated On:

Products

Data Loss Prevention Endpoint Prevent Data Loss Prevention Network Prevent for Email Data Loss Prevention Enforce Data Loss Prevention Network Discover Data Loss Prevention Network Prevent for Web Data Loss Prevention Network Protect Data Loss Prevention Endpoint Discover

Issue/Introduction

Which Symantec DLP components are supported within virtualized environments?

Resolution

Only the following components are supported within a VMWare container:

V10.5

Enforce
Network Discover
Network Protect
Network Prevent for Email
Network Prevent for Web
Endpoint agents only (not Endpoint server)

Citrix XenApp (Presentation Server) 4.5 and Citrix XenDesktop 3.0 are supported.
VMware ESXi in general and VMware ESX 3.5 for Endpoint server are explicitly unsupported.

V11

Enforce
Network Discover
Network Protect
Network Prevent for Email
Network Prevent for Web
Endpoint agents only (not Endpoint server)

Citrix XenApp (Presentation Server) 4.5 and Citrix XenDesktop 3.0 are supported.
VMware ESXi in general and VMware ESX 3.5 for Endpoint server are explicitly unsupported.
ESX 4.0 is supported as well.

V11.1

Enforce
Network Discover
Network Protect
Network Prevent for Email
Network Prevent for Web
Endpoint Agents

Endpoint Server is supported but with limitations. The recommended number of agents for a particular type of dedicated VM configuration can be summed up as follows:

  • Number of supported agents for Configuration-1 (2 CPU 8 GB RAM) - 5000 agents
  • Number of supported agents for Configuration-2 (4 CPU 16 GB RAM) - 7000 agents

Please note, these numbers are without eDAR scans or Two Tier Detection, which reduces the number of agents that can connect to the Endpoint Server.
 

 


Please see also TECH220623 regarding support of Oracle in virtualized environments

VMWare Note:
1. All –supported- DLP vms would have to meet the minimum requirements as outlined in Symantec_DLP_11.1_System_Requirements_Guide.
2. The VMWare host machine would need to meet the SUM of those DLP vms PLUS additional resources to run the VMWare
3. No specific performance guarantees or sizing recommendations for the virtual container specifications will be made.  Customer will need to validate proper sizing and performance impact on their own by testing their current virtualization design and expected performance needs.
4. There will be no support for VMWare configuration and troubleshooting. Supporting DLP on VMWare is targeted for customers who have this technology deployed elsewhere in their current environment, have established internal standards on what should be virtualized, and a methodology to size and test the different products.

5. Supported versions of VMWare are ESX version 3.5, 4.0, and 4.1

Supportability Note:
Please note that if you are running a component within an uncertified environment, it is considered an alternate configuration.
A full outline regarding the scope of support regarding supported and alternate configurations can be found in http://www.symantec.com/business/support/Enterprise_Technical_Support_Policy.pdf .

 

V11.6

Enforce
Network Discover
Network Protect
Network Prevent for Email
Network Prevent for Web
Endpoint Agents

Endpoint Server is supported but with limitations. The recommended number of agents for a particular type of dedicated VM configuration can be summed up as follows:

  • Number of supported agents for Configuration-1 (2 CPU 8 GB RAM) - 5000 agents
  • Number of supported agents for Configuration-2 (4 CPU 16 GB RAM) - 7000 agents

Please note, these numbers are without eDAR scans or Two Tier Detection, which reduces the number of agents that can connect to the Endpoint Server.
 

V12

Enforce
Network Discover
Network Protect
Network Prevent for Email
Network Prevent for Web
Endpoint Agents

Endpoint Server is supported but with limitations. The recommended number of agents for a particular type of dedicated VM configuration can be summed up as follows:

  • Number of supported agents for Configuration-1 (2 CPU 8 GB RAM) - 5000 agents
  • Number of supported agents for Configuration-2 (4 CPU 16 GB RAM) - 7000 agents

Please note, these numbers are without eDAR scans or Two Tier Detection, which reduces the number of agents that can connect to the Endpoint Server.
 

Note: