Turbo IDPS Engine Compatibility Pre-Check Script
Article ID: 396277
Updated On:
Products
Issue/Introduction
Turbo IDPS Engine is a platform designed to run advanced Layer 7 application detection & IDPS security services on ESX NSX-T transport nodes.
scrx_compatibility_check.py is a Python utility used to verify whether ESXi hosts meet the prerequisites for running the Turbo IDPS engine.
It supports two operational modes:
1. Pre-Check Mode: Validates host readiness for Turbo IDPS by checking:
□ ESXi Version: Must be 8.0.3 P04 (build 24280767) or higher
□ Bootbank Size: 1GB or greater
□ Power State: Host must be powered on
□ Connection State: Host must not be disconnected or unresponsive
2. Post-Check Mode: Determines whether the legacy nsx-ids, nsx-vdpi vibs, or the new nsx-scx vib is installed on the host.
Note:
- The terms SCRX, SCX, DDPI, Turbo IDPS are used interchangeably to refer to the same feature
- VLCM-images clusters are NOT SUPPORTED
Resolution
How Does the Script Work?
The script connects to a vCenter server, enumerates all clusters and standalone hosts, and lets the user select specific clusters or apply the check to all hosts.
Results can be displayed as formatted ASCII tables on the console or exported as a CSV file.
How to run the Script?
Download the script attached to this KB to a system installed with python3 and the pyVmomi module having connectivity to the vCenter. Alternatively, the user can choose to download and run the script from the "root" shell of the NSX Manager.
(MD5sum of the scrx_compatibility_check.py is f4165211c8807595130d7b3cf7eb01b2)
Examples
-
To run the pre-check, pass the -pre-check argument in the command "python3 scrx_compatibility_check.py -k -s <vCenter-IP/FQDN> -u <vCenter-user-name> -pre-check"
root@nsx-manager# python3 scrx_compatibility_check.py -k -s 10.###.##.## -u [email protected] -pre-check
Enter password for host 10.###.##.## and user [email protected]: <<< Enter the password here
This program checks the ESXi host compatibility for installing SCRX IDPS engine.
1. ESXi version is 8.0.3 P04 (build 24280767) or higher.
2. Bootbank size is 1GB or larger.
Available clusters and standalone hosts:
1. Cluster: Cluster-A (Datacenter: datacenter-A)
2. Cluster: Cluster-B (Datacenter: datacenter-A)
0. All clusters and standalone hosts
e. Exit
Enter the number of the cluster/host to check (0 for all, e to exit): 0 <<< Choose whether to inspect a specific cluster or all the clusters
Datacenter: datacenter-A
Cluster: Cluster-A
Cluster Cluster-A is NOT supported for IDPS SCRX in NSX 4.2.2 since it is vLCM-Images enabled.
Datacenter: datacenter-A
Cluster: Cluster-B
Checking 3 hosts.
┌──────────────┬──────────────────┬─────────────────────────────────────────────────────────────────────────────────────────────────────┐ │ Host │ Pre-Check Status │ Pre-Check Issues │ ├──────────────┬──────────────────┬─────────────────────────────────────────────────────────────────────────────────────────────────────┤ │ 10.###.###.1 │ Not Compatible │ Minimum build number required is 8.0.3 P04 (24280767). This ESX is VMware ESXi 7.0.3 build-24585291 │ │ 10.###.###.2 │ Not Compatible │ Bootbank BOOTBANK1 is 524009472 bytes, required 1073741824 │ │ 10.###.###.3 │ Compatible │ None │ └──────────────┴──────────────────┴─────────────────────────────────────────────────────────────────────────────────────────────────────┘ -
To run the post-check, pass the -post-check argument in the command "python3 scrx_compatibility_check.py -k -s <vCenter-IP/FQDN> -u <vCenter-user-name> -post-check"
root@nsx-manager# python3 scrx_compatibility_check.py -k -s 10.###.##.## -u [email protected] -post-check
Enter password for host 10.###.##.## and user [email protected]:
This program checks the IDPS engine type installed on ESXi hosts.
1. Legacy IDPS engine uses nsx-ids and nsx-vdpi VIBs.
2. New SCRX IDPS engine uses nsx-scx VIB.
Available clusters and standalone hosts:
1. Cluster: Cluster-1 (Datacenter: datacenter-A)
0. All clusters and standalone hosts
e. Exit
Enter the number of the cluster/host to check (0 for all, e to exit): 0 <<< Choose whether to inspect a specific cluster or all the clusters
Datacenter: datacenter-A
Cluster: Cluster-1
Checking 2 hosts.
┌────────────────┬─────────────┐
│ Host │ IDPS Type │
├────────────────┬─────────────┤
│ 10.##.###.4 │ SCRX IDPS │
│ 10.##.###.5 │ Legacy IDPS │
└────────────────┴─────────────┘ -
When running the script with -pre-check or -post-check option user can choose to dump the Output to a CSV file, by passing the "-output csv" argument in the command.
root@nsx-manager# python3 scrx_compatibility_check.py -k -s 10.###.##.## -u [email protected] -post-check -output csv
Enter password for host 10.###.##.## and user [email protected]:
This program checks the IDPS engine type installed on ESXi hosts.
1. Legacy IDPS engine uses nsx-ids and nsx-vdpi VIBs.
2. New SCRX IDPS engine uses nsx-scx VIB.
Available clusters and standalone hosts:
1. Cluster: Cluster-1 (Datacenter: datacenter-A)
0. All clusters and standalone hosts
e. Exit
Enter the number of the cluster/host to check (0 for all, e to exit): 0 <<< Choose whether to inspect a specific cluster or all the clusters
Datacenter: datacenter-A
Cluster: Cluster-1
Checking 1 hosts.
Results written to scrx_post-check_20250502_165037.csv <<< CSV file
Attachments
Feedback
