This section explains how to link virtual L-Servers with configured virtual PCs.
Notification of security risks detected on virtual PCs by the following servers is sent to Resource Orchestrator using SNMP traps or a REST API.
OfficeScan 11.0 server
OfficeScan XG server
Symantec Endpoint Protection Manager
McAfee ePolicy Orchestrator server
In response, the virtual PCs to be switched to the quarantine network are identified. This identification requires that there are L-Servers configured with the IP addresses of the virtual PCs to be quarantined.
In addition, the switchover to the quarantine network requires a virtual L-Server for network operation.
For the virtual L-Server for network operation, there are restrictions on the types of virtual NICs of virtual PCs to be linked with virtual L-Servers. The following virtual NICs are supported:
E1000e
E1000
VMXNET3
Linking virtual PCs with virtual L-Servers enables the IP addresses assigned to the virtual PCs to be loaded to the virtual L-Servers.
Prerequisites
The prerequisites for loading an IP address of a virtual PC to an L-Server are as follows:
The virtual PC is turned on
Resource Orchestrator has detected the virtual PC
Turn on the virtual PC, and then wait about six minutes.
VMware Tools is operating on the virtual PC, and the virtualization software has detected the IP address
Confirm this using the virtualization software (vSphere Client or vSphere Web Client). Confirm the following:
The [VMware Tools] label on the [Summary] tab for the virtual PC indicates that the software is running
The [IP Addresses] label on the [Summary] tab for the virtual PC shows the IP address assigned to the virtual PC
The virtualization software has detected the IP address
Note
If a Hyper-V virtual PC is running Windows and update KB3063109 has not been applied, it may not be possible to load the IP address assigned to that virtual PC to an L-Server. Be sure to use Microsoft Update, etc. to apply the latest updates.
XenServer Tools is operating on the virtual PC, and the virtualization software has detected the IP address
Confirm this using the virtualization software (XenCenter). Confirm the following:
In [Virtualization state] on the [General] tab for the virtual machine, "Management Agent installed" is displayed
[IP Address] on the [Networking] tab for the virtual machine shows the IP address assigned to the virtual machine
Home Server is set on the virtual machine.
