Can I only use the vShield service with NSX

[clack198706]

Now the vShield manager is integrated with NSX. I have a problem with NSX in my environment.

In my vmware environment, we only use vmware standard switches. But I need NSX for the vShield manager and no need all other NSX services.

Is that possible for us to use vShiled service with NSX?

[bayupw]

Hi Li,

Could you explain on what are you referring to vShield service?

Are you referring to vShield Endpoint or something else?

It depends on what services are you using from NSX, you might need to use vDS

NSX and vSphere Distributed Switches

NSX services are not supported on vSphere Standard Switch. VM workloads must be connected to vSphere Distributed Switches to use NSX services and features.

[clack198706]

Yes, I just need vShield endpoint for Deep_Security

https://help.deepsecurity.trendmicro.com/software-9-6.html

Some of our ESXi hosts only have vsphere standard license.So it is not possible for us to deploy VDS in our environment.

[bayupw]

What VMware NSX license do you have?
If you purchased VMware NSX, you should be able to use vDS as per below KB article

Overview of vNetwork Distributed Switch concepts (1010555) | VMware KB

Note: vDS now comes bundled with NSX for vSphere (NSXv) and VMware vSAN in vSphere 6.x.

If you can't migrate to vDS and want to use vSS, I believe technically you can deploy the Agent VM on vSS

Use the Agent VM settings in ESXi host level and select vSphere Standard Switch PortGroup on every ESXi host.

But I haven't found a document that explicitly states if this deployment is supported or not.

You would probably need to check with VMware Support.