Can a Data Loss Prevention Network Monitor server be installed on a Virtual Machine?

Products

• Data Loss Prevention Network Monitor

Issue/Introduction

Can a Symantec Data Loss Prevention (DLP) Network Monitor server be installed on a Virtual Machine server?

Resolution

DLP 15.8 and above:

• Support for Network Monitor on a virtual machine was added to DLP 15.0 when using a Napatech NT20E2, NT4E, NT40A01, and NT40E3 high-speed packet capture card .
• You must have Napatech driver package 8.0.3 (driver version 3.5.1) (Windows Server 2012 R2 and Windows Server 2016) and driver package 8.1.0 (driver version 3.5.0) (RHEL 6x/7x).
• This must be configured with capture cards as PCI pass-through devices in the VMware ESXi platform.
• Any other VM configuration is not supported for Symantec DLP Network Monitor. 
• Though supported, it is always advised to use a physical dedicated server for Network Monitor for ease of setting up and decreasing packet loss through virtualization as well as increasing of performance overall. 

Napatech cards are not supported on Single Server installations.

Additional Information

For more information please review these documents [links as of v25.1]: 

• Virtual Server Support
• Installing Npcap on a Windows platform
• Network Monitor Server—Basic Configuration
• Network Monitor performance test results and sizing guidelines for environments with Napatech cards