cannot deploy SVM to ESXi 6.7

Question

cannot deploy SVM to ESXi 6.7 
 logs 
 drive.google.com/open

StephenMcKay · Accepted Answer

Hi Maytee, 
 The SVM does not support Message Relay and so the device will need to be able to communicate directly with the MCS server at 
 mcs-cloudstation-us-east-2.prod.hydra.sophos.com 
 
 Regards, 
 Stephen

Jasmin · Answer

Hi Maytee Meng 
 I discussed this with our product specialist team and as StephenMcKay has mentioned, Installations of Sophos for virtual environments are not supported with Message relay. 
 So, now the customer has to open a connection to Central from the host he is trying to install Security VM. Unfortunately, it is the only option. 
 If they want to open the connection for a specific host, they need to disable DRS for it as if DRS is enabled Security VM could move to a different host in future and will not be able to communicate with Sophos cloud for the updates.

Jasmin · Answer

Hi Maytee Meng 
 Your SVM configuration is getting failed and because of that SVM installation is giving you the error. 
 As SVM setup has been downloaded from the Sophos Central, SVM is trying to fetch the TLS certificate from the Sophos Central but it is not able to contact Sophos Central itself and because of that MCS communication is also not happening as mentioned in the Syslog. 
 I'd suggest you to analyze how many firewalls are in place between this host and internet and on those firewalls, please allow the domains and ports mentioned in this article as any of the domain is getting blocked while the communication process. 
 Even after that if it failing, please follow the article provided by Shweta above.