Perform platform support for ATP VE

Products

• Endpoint Detection and Response
• Advanced Threat Protection Platform

Issue/Introduction

 

Resolution

You seek information on common platform support procedures for Symantec Endpoint Detection and Response (SEDR) Virtual Edition (VE)

 

Previous names:

• Advanced Threat Protection (ATP) Platform Virtual Edition (VE) appliance.
• Symantec Advanced Threat Protection: Network Virtual Edition (SATP:N VE)

.

Virtual platform: SEDR VE is an OVF Template for VMWare ESXi6 or later.

VE Installation/Reinstallation Procedures:

• Preinstallation checklist
• Rule out ATP 2.x OVA or ISO corruption before installation
• Raise SEDR VE as an Endpoint-Only test environment
• Install SEDR VE
• Preparation checklist for reinstalling ATP 3.x
• Reinstalling SEDR VE

 

Hardware solutions or troubleshooting guides that are specific to SEDR VE model:

• Bypass mode does not relay traffic
• SEDR appliance only negotiates 1GB speed when connected to a 10GB switch or router
• SEDR VE does not support restoring from a VMWare snapshot
• SEDR VE does not support deployment via vCloud
• Connect management computers to the Management network within VMWare
• SEDR VE fails to serve UI after ESXi host loses connection to its remote datastore
• "The disk capacity specified is greater than the amount available on the datastore" when deploying OVA for SEDR VE with thick disk provisioning
• SEDR VE fails to serve UI after ESXi host loses connection to its remote datastore
• Overcommitted resources within ESXi may result in high memory usage or high CPU usage status within SEDR UI