This topic explains how you can deploy BOSH Add-ons, which are optional platform extensions deployed with BOSH rather than installed as VMware Tanzu Operations Manager tiles.
VMware recommends installing BOSH Add-ons immediately after you deploy BOSH and Tanzu Operations Manager, and before you use Tanzu Operations Manager to add tiles to the platform.
BOSH Add-ons from VMware include IPsec, ClamAV, and File Integrity Monitoring, which enhance VMware Tanzu Application Service for VMs (TAS for VMs) platform security and security logging.
Open-source BOSH Add-ons include a syslog forwarder, a custom SSH login banner, and a tool for adding SSH users.
For an overview of the BOSH deployment process, see [Deploying software with BOSH](deploy-bosh-om.html#bosh in Deploying BOSH and Tanzu Operations Manager).
Available Add-ons
-
IPsec: Secures data transmissions inside TAS for VMs following IPSec standards.
-
Anti-Virus: Logs TAS for VMs internal antivirus protection activity, to demonstrate to auditors that it complies with industry standards and government regulations.
-
File Integrity Monitoring (FIM): Logs TAS for VMs internal file integrity monitoring activity, to demonstrate to auditors that it complies with industry standards and government regulations.
