Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 2 replies
  • Subscribers 2 subscribers
  • Views 6339 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sizing/HA recommendations

ChisagoMICS

We are currently using Sophos with vshield and now that this new product has been released we have it loaded in our dev environment.  Couple of major issues that we see, hoping there is some plan to address these in a future release.

 

1.  Are there any sizing recommendations for how beefy to make the security VM's or VM to security VM ratios?  I don't see anything documented.

2.  The lack of ability to specify in the guest VM agent settings more than 1 IP for security VM options.  With the vshield previous version for virtual environments all we had to do was put one security VM on each ESXi host and the clients would automatically use which ever security VM was on whatever host it was on-without having to traverse the network.  With this new version there isn't a great way-other than DRS rules to keep them together-which doesn't work well in horizon linked clone environment where the VM's are constantly being deleted/recreated.



This thread was automatically locked due to age.
  • 0

    Hello  

    1) We have not provided sizing guidelines as it does depend on your environment. What the spec of the host server is, how much resource is allocated to each GVM, as well as what the GVMs are being used for.  There is no limit set by the SVM as to how many GVMs it will protect. 

    Sophos for Virtual Environments actually provides better performance figures when there are more GVMs due to our advanced caching. As each GVM goes through the scanning process, any files that are deemed clean by the SVM will be added to its own cache and also sent to each of the GVMs.

    When a GVM intercepts a file being opened it will look at its local cache first – so it won’t need to send a file to the SVM if it has already been deemed as clean – which will reduce scanning time after the first file scan.

    2) We are currently developing a 1.1 version of SVE which will include the ability to add in multiple IP addresses when installing the guest agent. This will allow the GVM to connect to another SVM if one is unavailable or is no longer accessible on the network. Please look out for release dates over the next month or so. 

     

    Thanks 

    Mark 

  • +1 in reply to MarkToshack

    Hi 

     

    I have created an update for the upcoming SVE 1.2 release that will allow multiple IP addresses for the GVMS to connect to.

     

    https://community.sophos.com/products/server-protection-integration/f/sophos-for-virtual-environments/98665/update-on-1-2 

    cheers

     

    Mark 

Unfiltered HTML