AntiVirus Agent vs Agentless

[reuvygroovy]

Does anyone have any experience running A/V software from within the VDI with a full Agent in the Guest PC, or do you all use agentless and NSX?

[techguy129]

We are running SCEP in the VM desktop for the non-persistent desktops. For the definition updates, I have SCEP pointing to a file share. I have a script that will go out and download the latest definitions. We recompose the desktop monthly, so we will update the SCEP AV during that time as well. For the past two years, it hasn't caused us any troubles.

Script SCEP - Download Definition Updates to UNC-Path with Powershell

Now, if you have agentless services available, it would best to use that as it offers less overhead on the VM's themselves.

[BenFB]

We are doing Bit9/Carbon Black in all of our virtual desktops. It works but comes at an increase resource cost and requires specific tuning to play nice with virtual desktops.