Add all SVMs you want to protect with Kaspersky Security to the NSX Security Group. First, create the NSX Security Group and configure the rules for adding VMs to the group.
The following options of adding SVMs to the NSX Security Group are available:
- Adding SVMs to the NSX Security Group dynamically.
The group includes all SVMs that meet the criteria which are running at the moment of NSX Security Group creation. Other SVMs that meet the criteria will be added to the group at their next startup. В - Adding specified VMware management objects to the NSX Security Group.
You can select the objects to be added to the group, e.g. the Datacenter object, the VMware cluster, a resource pool, оr specific VMs. By default, all child objects of the specified VMware management object are added to the group, including the VMs which are switched off at the moment. You can also specify theVMware management objects, which should not be added to the NSX Security Group.
You can combine these options when configuring the rules of adding SVMs to the NSX Security Group. For example, you can select adding the VMs to the group according to specified parameters dynamically and also specify the VMware management objects to be excluded from the group.
To configure a NSX security group:
- Select Networking & Security.
- Click Service Composer and select the Security Groups tab.
- Click the Add icon. The wizard will be launched.

- Enter the name for the new NSX Security Group, e.g. “Kaspersky Security Group” or “Protected by Kaspersky”.
- Click Next.

- If you want to set up adding VMs to the group dynamically, proceed to the Define dynamic membership step of the wizard.
- Click the plus icon and then click Add in the Membership criteria 1 entry form.
- Adjust the criteria for adding the VMs to the group. For example, to add all VMs which meet the Kaspersky Security hardware requirements, use the parameter Computer OS Name – Contains – Windows.

- If you want to specify the VMware management objects to be added to the NSX Security Group, proceed to the Select objects to include step.
Select the object type in the Object Type field and move all VMware management objects you need to the Selected Objects list.

- If you want to specify the VMware management objects to be excluded from the NSX Security Group, proceed to the Select objects to exclude step.
Select the object type in the Object Type field and move all VMware management objects you want to exclude to the Selected Objects list.

- To check the specified parameters, proceed to the Ready to complete step.
- Click Finish.

The wizard will close. On the Security Groups tab, you ca view the number of VMs which will be added to the group in the Virtual Machines section.

You can view the list of VMs added to the group. To do it, click the number in the Virtual Machines section.

If you selected adding the VMs to the group dynamically, the machines which are not running at the moment are not shown in the group. They will be added to the group the next time they are launched.
- In the VMware vSphere Web Client console, select Hosts and Clusters and make sure the VMs you want to protect are in the group. For each virtual machine which meets the requirements of the group, in the Security Group Membership section of the Summary tab, the name of the NSX Security Group is specified.
