Bitdefender GravityZone provides full visibility into organizations' overall security posture, global security threats, and control over its security services that protect virtual or physical desktops, servers and mobile devices. All Bitdefender's Enterprise Security solutions are managed within the GravityZone through a single console, Control Center, that provides control, reporting, and alerting services for various roles within the organization

Security for Virtualized Environments (SVE) is the first comprehensive security solution for virtualized datacenters. The solution protects virtualized Windows, Linux, and Solaris systems, both servers and desktops. While integrated with VMware vShield Endpoint, the unique architecture of the solution allows it to be leveraged when using any system virtualization offering.

This article explains how to install Security Server on the hosts you want to protect.

Security Server is a dedicated virtual machine that deduplicates and centralizes most of the antimalware functionality of antimalware clients, acting as a scan server.
You must install the purpose-built appliance on each host to be protected. All virtual machines on a host are automatically connected via vShield Endpoint to the Security Server instance installed on that host.
For VMware environments with vShield Endpoint, you can deploy Security Server on hosts exclusively via installation tasks.

Using Remote Installation Tasks

Control Center allows you to remotely install Security Server on visible hosts by using installation tasks.

To install Security Server remotely on one or several hosts:

1. Go to the Network page.
2. From the service selector in the upper-right corner of the page, select Virtual Machines.
3. Browse the VMware inventory and select the check boxes corresponding to the desired hosts or containers (vCenter Server, or datacenter). For a fast selection, you can directly select the root container (VMware Inventory). You will be able to select hosts individually from the installation wizard.

   Note: You cannot select hosts from different folders.

4. Click the Tasks button at the right side of the table.
5. Choose Install Security Server from the menu. The Security Server Installation window is displayed.

   

6. Select the hosts on which you want to install the Security Server instances.
7. Choose the configuration settings you want to use.
   When you configure each Security Server differently, repeat steps 9 to 18 for each Security Server.

   Important: Using common settings while deploying multiple Security Server instances simultaneously requires the hosts to share the same storage, have their IP addresses assigned by a DHCP server and be part of the same network.

8. Click Next.
9. Optionally, you can enter a suggestive name for the Security Server.
10. Select the container in which you want to include the Security Server from the Deploy Container menu.
11. Select the destination storage.
12. Choose the disk provisioning type. It is recommended to deploy the appliance using thick disk provisioning.

    Important: If you use thin disk provisioning and the disk space in the datastore runs out, the Security Server will freeze and, consequently, the host will remain unprotected.

13. Configure the memory and CPU resource allocation based on the VM consolidation ratio on the host. Choose Low, Medium or High to load the recommended resource allocation settings or Manual to configure resource allocation manually.
14. Optionally, you can choose to set an administrative password for the Security Server console. Setting an administrative password overrides the default root password ("sve").
15. Set the timezone of the appliance.
16. Select the network configuration type for the Bitdefender network. The IP address of the Security Server must not change in time, as it is used by Linux agents for communication.
    If you choose DHCP, make sure to configure the DHCP server to reserve an IP address for the appliance.
    If you choose Static, you must enter the IP address, subnet mask, gateway and DNS information.
17. Select the vShield network and enter the vShield credentials. Default label for the vShield network is vmservice-vshield-p.
18. If you configure Security Servers differently, click Next to continue with the following server.
19. Click Save.