Deploying ISG Proxy VA in ESXi and creating aggregate interface on the ESXi, for SG-VA deployment.

Products

• ISG Proxy
• ProxySG Software - SGOS

Issue/Introduction

Deploying ISG Proxy VA in ESXi and creating aggregate interface on the ESXi, for SG-VA deployment.

Environment

SGOS 7.3.x.x/7.4.x.x

Resolution

The Integrated Secure Gateway (ISG) Enterprise Secure Web Gateway Virtual Appliance (SWG VA) is a software solution that can be installed and deployed on a server running VMware vSphere Hypervisor. ProxySG VA facilitates server consolidation by co-existing with other virtual machines on a single hardware platform. With the ProxySG VA providing security, the other virtual machines can provide branch office services (such as Domain Controller, print, DNS, and DHCP), as well as any VMware-certified software applications.

Symantec is VMware Ready™. Symantec has worked closely with VMware to ensure that the ProxySG VA runs efficiently in the virtual environment and meets all technical criteria and specifications.

Now, for the customer's step-by-step deployment guidance, please refer to the Tech. Doc. with the URL below.

Deploy an ISG Enterprise Edge SWG (ProxySG) VA on VMware

The Tech. Doc. above specifically provides guidance for the specific guidance for the download of the Virtual Appliance Package.

The Virtual Appliance Package (VAP) is a zip file that contains the following files:

• Two Open Virtualized Format OVF files:

• • ProxySG-Enterprise-VA-100.ovf

• • ProxySG-Enterprise-VA-200.ovf

Note: Use the OVF that matches the size of the data disk. See the Tech. Doc. with the URL: Verify System Requirements for the ISG Enterprise Edge SWG (ProxySG) VA on VMware

So, you can chose any of the two Virtualized Format OVF files, either ProxySG-Enterprise-VA-100.ovf or ProxySG-Enterprise-VA-100.ovf. For the choice the customer makes, they are to ensure that the system requirements are matching. Please refer to the Tech. Doc. below, for the remaining steps, to download the virtualized appliance package.

Download the Virtual Appliance Package for the ISG Enterprise Edge SWG (ProxySG) VA on VMware

For the interface aggregation, because the appliance is to be deployed as an instance in ESXi/vCenter and will be utilizing the VMware network, the customer should be following the VMware's guidance to enable LACP. Reference has been made to the VMware resource with the URL: Enable EtherChannel / Link Aggregation Control Protocol (LACP) in ESXi/vCenter.

With LACP correctly implemented in ESXi, reference's been made to the Tech. Article with the with the URL below, for the ProxySG LACP Deployment Example. It's important to note that, with VMware, the switch will be the VM switch and not the Cisco switch.

LACP aggregation on a ProxySG or Advanced Secure Gateway Appliance