Anti-Virus for vShield/View

[nzorn]

Does anyone have any info regarding Anti-Virus for vShield/View?

Symantec Endpoint Protection is an option, but it is not agentless and also requires you to do the following whenever we make a change to the template:

1.  Run the Virtual Image Exception tool from the command line to mark the base image files as safe (meaning those files are not going to be scanned on the linked clones).  http://www.symantec.com/business/support/index?page=content&id=TECH172218

2.  Run ClientSideClonePrepTool.exe:  This tool removes all Symantec Endpoint Protection client identifiers and leave the Symantec Endpoint Protection services stopped. Using this tool should be the last step in the image preparation process, before running sysprep and/or shutting down the system. If the system reboots or the Symantec Endpoint Protection client services restart, then new identifiers are generated and you must run the tool again before cloning.  http://www.symantec.com/business/support/index?page=content&id=HOWTO54706

These vendors seem to have an agentless solution for View, but was hoping someone would have some input on them:

Sophos

TrendMicro

Kaspersky

Many thanks

[vcpguy]

I would go with McAfee Move. I am using it in my environment and it is working great.

[SWINFIELD]

We use Kaspersky here which is excellent and agentless.  You need a windows server to run the Kaspersky Console to deploy a SVM per host and it works great.

I have used Symantec and McAfee in the past (for non view setups) and wouldn't touch them again with a barge pole. 

[vmroyale]

Trend Micro's Deep Security is an excellent solution that is agentless. There is a Notifier application that you can run in the system tray of the guests to allow communication back to your users. Without it, when a file gets blocked the user experience can be impacted as Windows will just throw error messages. You also need a Windows server and a SQL/Oracle DB for the Trend Deep Security Manager and each ESXi host will get an appliance.