Good Day Everyone,
For those you out there familiar with the SVA, I have an environment design question.
How can we set up the SVA to allow it to cascade through nested SEPM Client Groups?
If I configure the SVA (using the sylink.xml file during installation) for a specific SEPM Client Group, SEPM reports that those clients utilize the SVA that is installed on the host under which the VM guest is running. This seems to be the designed behavior.
If I have nested SEPM Client Groups with inherentance turned off (for the purposes of having customized policies taylored to the specific workloads of a given group of servers) it does not appear that the SVA is utilized by any clients below the specific group to which the SVA was configured. If I have the SVAs configured at the top tier of my nested SEPM Client Groups, any clients in child groups show 'Unknown' in the Security Virtual Appliance column in the Client view in SEPM.
We don't have the storage and compute capacity to install multiple VSAs for each tier of SEPM Client Groups and we must maintain the client groupings for the purposes of having customized policies taylored for specific workloads on given subsets of servers. I would like to be able to assign the VSAs to the top-tier of the SEPM Client groups into which our virtualized servers are organized and have all clients in the child tiers utilize the VSAs. All clients reside within a single vSphere cluster, the only segregation relevant here is the SEPM Client Group hirarchy.
If anyone has any insight, please advise,
Thank you,