VMware Tools include the NSX Thin Agent that must be installed on each guest virtual machine to be protected. Virtual machines with VMware Tools installed are automatically protected whenever they are started up on an ESX host that has the security solution installed. That is, protected virtual machines retain the security protection through shut downs and restarts, and even after a vMotion move to another ESX host with the security solution installed.


Ensure that the guest virtual machine has ESX 5.1 or later and a supported version of Windows installed. The following Windows operating systems are supported for NSX Guest Introspection:

  • Windows Vista (32 bit)

  • Windows 7 (32/64 bit)

  • Windows XP SP3 and above (32 bit)

  • Windows 2003 SP2 and above (32/64 bit)

  • Windows 2003 R2 (32/64 bit)

  • Windows 2008 (32/64 bit)

  • Windows 2008 R2 (64 bit)

  • Windows 8 (32/64) -- from vSphere 5.5 and later

  • Win2012 (64) -- from vSphere 5.5 and later

  • Windows 8.1 (32/64) -- from vSphere 5.5 Patch 2 and later

  • Win2012 R2 (64) -- from vSphere 5.5 Patch 2 and later


  1. Follow the procedure Manually Install or Upgrade VMware Tools in a Windows Virtual Machine.
  2. After you select Custom setup in step 7, expand the VMCI Driver section, select vShield Drivers, and select This feature will be installed on the local hard drive.
  3. Follow the remaining steps in the procedure.