Third-party partners services containing security scanning logic, are registered with NSX for guest VM protection. The partner service is enforced when the NSX admin deploys the registered services and applies end point protection policies to guest VM groups.

The guest introspection workflow for the endpoint protection use case is as follows:

Figure 1. Endpoint Protection Workflow

Workflow Tasks Role/Persona Implementation
Register Partner Services Partner Admin Partner Console
Register Vendor Template Partner Admin Partner Console

Configure Partner Services with NSX

 Partner Admin Partner Console
Deploy a Service NSX Admin API and NSX Manager UI
View Service Instance Details NSX Admin API and NSX Manager UI
Bring Up Service Instance NSX Admin API and NSX Manager UI
Add Service Profile NSX Admin API and NSX Manager UI
Consume Guest Introspection Policy NSX Admin API and NSX Manager UI
Add and Publish Protection Rules NSX Admin API and NSX Manager UI
Monitor Endpoint Protection Rules NSX Admin API and NSX Manager UI