Symantec EDR platform and hardware requirement support

Products

• Endpoint Detection and Response

Issue/Introduction

The Symantec Endpoint Detection & Response (SEDR) "Symantec EDR version support for appliances" for version 4.10.x lists VMWare and Hardware Appliance models with minimum system requirements. It does not mention alternative hypervisor vendors or hardware alternatives. You wish to know if alternative Hypervisors and/or reduced hardware can be used in order to implement non production or smaller scaled environments.

Resolution

The SEDR platform support matrix explicitly lists the only supported minimum requirements and hypervisor platforms. All other hypervisor types are not supported, and generally cause problematic installations. The large memory requirements are necessary due to the internal database and Elastic Search pre-provisioned sizes. Lower hardware allocations usually fail one or more services during startup causing a failure of the virtual appliance. Broadcom Engineering teams validate disk operation speed using VMWare drivers and do not approve/test against non dedicated ESX hardware provisioning or technologies such as VMotion, running with snapshots active, non dedicated hardware or any virtualization features that may increase IOPS or share resources. 

Customers with hardware constraints should consider the Cloud based product Symantec Endpoint Security Complete

Additional Information

See Reserving required resources for the virtual appliance for additional information about reserving resources on a virtual appliance.