Another thing we really ought to do before we start adding on additional anti-
malware policies is we should make sure we have basic connectivity in place.
So let me go back to the vSphere client and let's go ahead and grab a virtual
machine.
So here I have a little Mint VM on the 1055 segment. Let's go ahead and launch
a remote console.
So here is that remote console for that little VM which is on the 1055 network.
Let's bring up a command prompt just to verify that real quick.
So we'll do an IF config and sure enough 1055 0151. Let's open up a browser. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So we'll do an IF config and sure enough 1055 0151. Let's open up a browser.
Make sure we can get up to the internet.
So let's just do a quick speed test or hopefully what turns out to be a quick
speed test.
All right. That looks good.
And let's open up another tab and I also have this little metasplodable VM over
on network 66.
So I put a little shortcut here for it that should take us over to 1066 0.9.
So we'll click on that and that looks good as well.
All right. So we verified our connectivity.
Let's go back to the NSX manager and go to the system tab and let's click on
the NSX application platform WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
the NSX application platform
and check on our progress.
So in the previous video, we went down under features and we clicked on the NSX
malware prevention
and that is still going also.
It's telling us here that oftentimes customers will not only use the NSX
malware prevention,
but they'll also use additional features such as NSX intelligence as well as NS
X network detection
and response in conjunction with the NSX malware prevention.
Oh, and it just finished. That's lucky.
All right. So now this part is ready to go. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
All right. So now this part is ready to go.
Let's also take a look at the other areas inside the NSX manager where we need
to enable the devices to support it.
So right here is his partially up.
So I'm going to give it a few more moments to complete.
And while we do, we can go ahead and check the other parts.
So for setting up and enabling a gateway to be able to use the malware
prevention,
we're going to go to the security tab right here.
And then on the left, we're going to go down under policy management down to ID
S slash IPS and malware prevention right there.
So we'll click on IDS slash IPS and malware prevention. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So we'll click on IDS slash IPS and malware prevention.
Now in a previous skill, we took a look at using the IDS slash IPS.
And so we're not going to repeat that here.
We're going to focus on the malware side of it.
Now that we have the NSX application platform in place and we've enabled the
malware prevention.
So the first thing we're going to do right here within the IDS slash IPS and
malware prevention is click on settings.
And we're going to go down and we're going to specifically enable the malware
prevention on those devices where we want to use it.
So in the current version of NSX, the malware prevention can be implemented on WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So in the current version of NSX, the malware prevention can be implemented on
tier one gateways.
So if we scroll down, so this is for IDS slash IPS for standalone host, IDS
slash IPS for various clusters where we have ESXI transport nodes.
And if we scroll down, we should have the ability to see any tier one gateways
right here.
So here we're says activate gateways for north, south traffic here for tier one
gateway.
We're going to go ahead and enable the malware prevention.
So we'll click on that little slider, click on yes. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So we'll click on that little slider, click on yes.
And then also while we're at it right here, if we also wanted to use IDS slash
IPS, we could activate it right here as well.
Now the good news is that when I redeploy the edges for the benefit of this
demonstration, I did deploy them as the extra large form factor.
So they could support IDS slash IPS as well as malware prevention on the same
gateway.
So just to confirm, if we slid over to the vSphere client here for a moment and
took a look at our edges, here's lab one edge one.
And here on the summary page under the hardware, it has 16 CPUs and 64 gigs of WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And here on the summary page under the hardware, it has 16 CPUs and 64 gigs of
RAM and lab one edge to is similarly configured.
That's the extra large flavor for the deployment.
And regarding how busy those devices are for go to monitor for each of the
edges and go down to overview, we can see that the CPU utilization just went up
a whole bunch.
And that's very likely because we just enabled the feature for the malware
prevention.
So if we go over to lab one edge to again, a similar spike just a few moments
ago, because we just enabled the malware prevention. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
ago, because we just enabled the malware prevention.
So back here in the end is a manager under the security tab and on the left
selecting IDS slash IPS and malware prevention,
clicking on settings, we've enabled our gateway, our tier one gateway to be
able to use malware prevention.
Now that does not mean that it is using it.
It simply means that it's willing to use it.
So our next logical step then would be to create a profile for malware
prevention and then apply that profile as part of a firewall rule.
And that my friend is exactly what you and I get to do in the very next video. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And that my friend is exactly what you and I get to do in the very next video.
So I'll see you there in just a moment.