Installing vShield Endpoint question

[MattCassell]

Hi guys,

I have a very simple question for everyone.  We recently had to rebuild one of our ESXi hosts.  Unfortunately during the rebuild the step to install the vShield Endpoint was missed.  We now have lots of VMs running on that host (it is a VDI environment) and we only have a very small maintenance window for working on the host.

I have never had to set this up before (there was another admin who did it), so what I am wondering is does the installation of the Endpoint on the ESXi host require a reboot of the host or VMs to take effect?  I can't seem to find an answer to that anywhere.

Thanks for your help.

Cheers,

Matt

[SRoland]

No. None of the steps (install, upgrade, remove) of the endpoint installation requires reboot.

The host reboot is only required for vShield App and VXLAN upgrade, removal....

[tedg_vCrumbs]

I second SRoland. Have done it many times.

Non disruptive.

[Sreec]

Hi,

     Reboot is certainly not required until we are doing a Break&Fix step to Clean-Up/Install Endpoint.However when you Prepare the ESXI host via Third Party Security this will require putting the host into Maintenance mode so if DRS isn’t setup, you may need to manually enter maintenance mode.So if you haven't done filter driver installation via Third Party Security appliance and if you don't have DRS configured,there will be downtime for sure for VM'S.This is the only worst case possibility i'm aware of.

[tedg_vCrumbs]

I can confirm that Bit Defender won't even prep a host if it's in MM.

[Sreec]

Hi Ted,

           I'm unsure about Bit-Defender because i have never worked on that.Most of my testing was done using Trend-Micro and it needs Host in MM to install filter modules.Similar to what the author mentioned in vShield Endpoint – Trend Micro Deep Security (Part 2) | theITHollow

[tedg_vCrumbs]

"right on, right on"

The more info the merrier!