I recently installed Sophos for Virtual Environments in my VMware ESX Cluster. I deployed a Security VM on each of my 4 ESXi nodes. I'm confused about how the architecture of this product is supposed to work and would like some clarity.
When installing the agent on my VM's you have to point it to a Security VM. What I am finding is that when I shutdown that security VM the Sophos agent no longer functions.
How does the agent leverage the other Security VM's?
Are these Security VM's supposed to be dedicated to the specific ESX host they were installed on? If I put an ESX host in maintenance mode it just vmotions's the Security VM to another host. My impression was that the Security VM was supposed to handle the AV scanning of any of the VM's on the ESX host in which it is running. This does not seem to be the case.
I can shut down all my Security VM's except the one I pointed to during the agent install and the AV still works.
Am I missing something?
Thanks
This thread was automatically locked due to age.
