Requirements for deploying Virtual Sensors

This section discusses the server requirements for deploying Virtual Sensors.

VMware ESX server requirements

Component Minimum requirement
Virtualization software VMware ESX 5.0 and later.
  • Intel Xeon processor 5000 series or higher.
  • Minimum required processor speed is 1 GHz; recommended is 2 GHz or more.
  • 3 or 4 logical CPU cores based on the Virtual Sensor model.
  • Minimum 4 Ethernet ports; recommended is 6 (More Ethernet ports enable you to use that many Ethernet port pairs as monitoring port pairs.)

Other requirements

  • To install the Virtual Sensor, that is to deploy the OVA file, you need VMware vCenter Server. Using the VMware vSphere Client to deploy the Virtual Sensor OVA file is not recommended. For subsequent management of your VMware ESXi server, you might use VMware vSphere Client.
    Note: The procedures explained in this document were documented using VMware vCenter Server Version: Build 1123965 and VMware vSphere Web Client Version 5.1.0 Build 1063329.
  • Network Security Manager 8.1.x or later installed on a virtual or physical machine.
  • You require one license per Virtual Sensor. The license is also specific to the Virtual Sensor model you purchased. Make sure you have secured the required number of licenses from McAfee.
  • You must exclude the Virtual Sensor from VMware Distributed Resource Scheduler (DRS).
  • Do not install VMware tools for a Virtual Sensor.
  • For optimal and predictable performance follow these guidelines.
    • You must configure each Virtual Sensor VM to execute on as many cores as required for the Sensor model by assigning CPU affinity to the VM. For example, an IPS-VM100 VM must be affinitized to 3 logical cores.
    • No other virtual machines running on the same ESXi host can be allowed to share the CPU cores that are assigned to a Virtual Sensor virtual machine. For example, if there are 16 CPU cores on a ESX server, the Virtual Sensor VM can be affinizied to the first 3 CPUs. All other VMs running on the same ESX server must be excluded from using the first 3 CPUs by affinitizing them to use the remaining CPUs on the host.