Pls find my previous blogs about Trend DSM , Relay Server Installation and vShield Endpoint and in this blog we can see the Filter Driver Installation and its function.

Update:2\27\2016

Check the blog to install the filter driver on ESX5.x under Trend DSM 6.0 SP1

The Filter Driver is installed on each host in the cluster and the driver will interact between the ESXi and the DSVA which will re-directs the traffic from the ESXi networking layer to the DSVA to scan and also it is responsible for sending over the connection states of a VM to the other host when a VMotion moved the VM to the another host. We need Filter driver for Trend to manage the VMs and DSVA appliances which will put the ESX host in Maintenance Mode and also reboots the host during the installation.

Allow DSM to put the ESXi host in/out maintenance mode when installing the driver, the ESXi server will be put into maintenance mode, thus, schedule the deployment of DSVA and the Filter Driver carefully. When preparing the ESX box, allow the Deep Security Manager to automatically bring the host into and out of maintenance mode (via the deploy wizard).

Filter Driver Installation.

Go to the Computers – vCenter – Host and Clusters and select the host . Right-click Prepare ESX.

Select yes and click finish,  which will put the ESX in MM also note it will reboot the host after the installation.

Preparation will start installing the filter driver and also it will configure the VMSERVICE-VSWITCH and creates the VM port group on the isolated network which was created as part of the vShield Manager.

Once the ESX host has been rebooted it will be in the Maintenance Mode , remove the same and we can see the extra port group vmservice-trend-pg in the vmservice-vswitch.

We can find the Filter Driver and the modules are running by using the below command.

~ # esxcli software vib list | grep Trend

Run this command to check the modules:

~ # vmkload_mod -l | grep dvfilter

The IP of the DVfilter should match the VM Kernel VNIC IP found in the Deep Security Manager (DSM) console, under the Network configuration tab of vCenter Properties.

VM Kernel IP.

If we check the advance settings of the ESXi host, we can find the kernel IP 169.254.1.1 .

To verify, run the command “~ # esxcfg-advcfg –get /Net/DVFilterBindIpAddress” . The value of DVFilterBindIpAddress should be 169.254.1.1.

The predefined port 2222 should be open for inbound for DVFilter use. Use TELNET command to check if the port is open.

In My Next Blog we can see the Deep Security Virtual Appliance ( DSVA )