This topic explains how to deploy optional BOSH Add-ons.
BOSH Add-ons are optional platform extensions that you deploy with BOSH rather than installing them as VMware Tanzu Operations Manager (Ops Manager) tiles.
VMware recommends installing BOSH Add-ons immediately after deploying BOSH and Ops Manager, before you use Ops Manager to add tiles to the platform.
BOSH Add-ons from VMware include IPsec, ClamAV, and File Integrity Monitoring, which enhance VMware Tanzu Application Service for VMs (TAS for VMs) platform security and security logging.
Open-source BOSH Add-ons include a syslog forwarder, a custom SSH login banner, and a tool for adding SSH users.
For an overview of the BOSH deployment process, see [Deploying Software with BOSH](deploy-bosh-om.html#bosh in Deploying BOSH and Ops Manager).
IPsec: Secures data transmissions inside TAS for VMs following IPSec standards.
Anti-Virus: Logs TAS for VMs internal antivirus protection activity, to demonstrate to auditors that it complies with industry standards and government regulations.
File Integrity Monitoring (FIM): Logs TAS for VMs internal file integrity monitoring activity, to demonstrate to auditors that it complies with industry standards and government regulations.
