Understand Endpoint Protection

Know the use case and key concepts of endpoint protection.

Use case for endpoint protection Endpoint protection allows providing agentless anti-virus protection for VMs. The file and network events occuring on the VM are communicated to the partner VM by the guest introspection drivers. The partner VM has the anti-virus agent running that receives the events and responds with a verdict.

Using endpoint protection is beneficial for the following reasons:

• The agent running in the partner VM cannot be disabled or tampered with by any malware.

• The download of protection policies and signatures happens only on the partner VM and avoids signature download storms in the datacenter.