There are subsections that describe some scenarios for you to understand various deployment options. These scenarios are examples used for the sake of explanation; they might not exactly match real or typical network architectures. You can use the scenarios to determine the Virtual IPS Sensor deployment process for your network. As a VMware ESX administrator, your must identify a process that requires the least amount of changes to your network architecture and configuration.
The following is a high-level procedure that you can consider to deploy a Virtual IPS Sensor:
- Determine how you want to deploy the Virtual IPS Sensor. You can review the scenarios discussed in the subsections. When deciding the deployment type, you can factor in the following conditions:
- The kind of protection that your network requires. For example, whether you need to place monitoring ports in inline mode against SPAN mode.
- How to deploy the Virtual IPS Sensor with the least changes to your VMware ESX configuration.
- Follow the procedural information provided for the corresponding scenario.
- Evaluate your VMware ESX deployment and identify the vSwitches that need to be modified and those that need to be created.
- Evaluate the port groups that can be used and the ones that need to be created.
- Identify the vSwitches and port groups for the Sensor monitoring ports.
- Identify the vSwitches and port groups for the clients and servers that you need to protect.
- Verify if the deployment is functioning as expected. See the sectionVerify the deployment for more details.