How to remove the threat protection from specific ESXi hosts in a cluster while leaving the remaining ESXi hosts in the cluster protected

Products

• Data Center Security Monitoring Edition
• Data Center Security Server
• Data Center Security Server Advanced

Issue/Introduction

How to remove the threat protection from specific ESXi hosts in a cluster while leaving the remaining exit hosts in the cluster protected

Resolution

If you want to keep specific ESXi servers on a protected cluster from being protected while leaving the other ESXi hosts protected, you have three different options.

Option 1)
Create a DSwitch other then where SVA and Guest Introspection is being installed and move the ESXi hosts you do not want to protect to it. This will show a Failed state for remaining protected state, as NSX shows successful state when all ESXi are under one cluster are protected.

Option 2)
Remove / Don't Install vSepFLT driver on the Guest Virtual Machines under the ESXi host(s)(where protection is not required), this will show ESXi as protected however GVMs will always remain in unprotected state as they don't have the driver the does the protection. 

Option 3)
You can remove the ESXi from Cluster and move it to another cluster which is not under Symantec Threat Protection, they can move those  without removing anything.  When moving ESXi from a protected cluster should automatically remove Guest Introspection service and SVA from ESXi's.