Setup guide

Option Description
Netmask
Type the IP subnet mask associated with the assigned IP address.
Default Gateway
Type the IP address of the default network gateway.
7 Select the vShield Endpoint check box.
8 Click Install.
You can follow the progress of the vShield App installation on the Recent Tasks pane of the vSphere Client
screen.
9 After installation of all components is complete, do the following:
n
vShield App: At this point, vShield App installation is complete. Go to the vShield App > App
Firewall tab at the datacenter, cluster, or port group container level to configure firewall rules. Each
vShield App inherits global firewall rules set in the vShield Manager. The default firewall rule set
allows all traffic to pass. You must configure blocking rules to explicitly block traffic. To configure
App Firewall rules, see the vShield Administration Guide.
NOTE If you have installed vShield App on a stateless ESX, you must follow the steps in “Install
vShield App on a Stateless ESX Host,” on page 25 before rebooting the host.
CAUTION Do not modify service virtual machines through the vCenter client. This may break
communication between vShield Manager and vShield App and compromise the security of your
network.
n
vShield Endpoint: To complete installation, see “Installing vShield Endpoint,” on page 27.
n
vShield Data Security: To complete installation, see “Installing vShield Data Security,” on page 28.
What to do next
When all of the components are installed, perform one of the following tasks.
n
vShield App. At this point, vShield App installation is complete. Select vShield App > App Firewall at
the datacenter, cluster, or port group container level to configure firewall rules. Each vShield App inherits
global firewall rules set in vShield Manager. The default firewall rule set allows all traffic to pass. You
must configure blocking rules to explicitly block traffic. To configure App Firewall rules, see the vShield
Administration Guide.
NOTE If you installed vShield App on a stateless ESX server, you must follow the steps in “Install vShield
App on a Stateless ESX Host,” on page 25 before rebooting the host.
n
vShield Endpoint: To complete installation, see “Installing vShield Endpoint,” on page 27.
n
vShield Data Security: To complete installation, see “Installing vShield Data Security,” on page 28.
Install vShield App on a Stateless ESX Host
If you installed vShield App on a stateless ESX host, you must perform the steps below before rebooting any
of the ESX hosts on which vShield App is installed.
Prerequisites
n
Install vShield App on the stateless ESX host.
n
Ensure that the firewall configuration changes done on the host by the VIB are complete.
a In the vCenter client, select the stateless ESX host from the inventory panel.
b Click the Configuration tab.
Chapter 4 Installing vShield Edge, vShield App, vShield Endpoint, and vShield Data Security
VMware, Inc. 25