Assigning protection profiles by using NSX Profile Configurations

In a virtual infrastructure managed by a standalone VMware vCenter Server, Kaspersky Security lets you define the file protection settings at the level of NSX Security Groups. You can assign the same file protection settings to all virtual machines that are within the same NSX Security Group. To do so, you need to allocate virtual machines into NSX Security Groups and do the following for each security group:

  1. In the VMware vSphere Web Client console:
    1. Create an NSX Profile Configuration. To start the NSX Profile Configuration Wizard, you need to open the properties of the Kaspersky File Antimalware Protection service (in the Networking & Security → Service Definitions section, Services tab, Edit Settings action) and go to the Manage → Profile Configurations tab.
    2. Indicate this NSX Profile Configuration or the NSX Service Profile that was created based on this NSX Profile Configuration in the NSX Security Policy.
    3. Assign an NSX Security Policy to an NSX Security Group.
  2. In the Kaspersky Security Center Administration Console, in the Kaspersky Security policy properties, set mapping between the NSX Profile Configuration and the protection profile.

    The protection profile settings will be used for the protection of virtual machines from the NSX Security Group to which the NSX Security Policy was applied.

To map an NSX Profile Configuration to a protection profile:

  1. In the policy properties for one VMware vCenter Server, select the Protected infrastructure subsection.
  2. In the drop-down list located in the upper part of the window, select the Use NSX Profile Configurations option.
  3. In the table, select the NSX Profile Configuration for which you want to set mapping and double-click to open the Selecting Protection profile window.
  4. In the opened window, select the Use protection profile option. In the drop-down list, indicate the name of the protection profile that should be mapped to the NSX Profile Configuration. The list contains the main protection profile and all additional protection profiles that you configured in this policy.
  5. Click OK.

    The Selecting protection profile window will close, and the assigned mapping will be displayed in the table in the Protected infrastructure subsection.

  6. In the Properties: <Policy name> window, click OK.

The default protection profile is automatically assigned to NSX Profile Configurations that have not yet been mapped to a protection profile or whose mapping was canceled due to the deletion of the protection profile. You can change the default protection profile or cancel use of the default protection profile.

To change the default protection profile:

  1. In the policy properties for one VMware vCenter Server, select the Protected infrastructure subsection.
  2. In the drop-down list located in the upper part of the window, select the Use NSX Profile Configurations option.
  3. Click the Change button located on the right of the default protection profile name.

    The Selecting protection profile window opens.

  4. If you want to change the default protection profile, select the Use protection profile option and indicate the name of the protection profile in the drop-down list. The list contains the main protection profile and all additional protection profiles that you configured in this policy.

    The specified protection profile will be mapped to those NSX Profile Configurations that have not yet been mapped to a protection profile or whose mapping was canceled due to the deletion of the protection profile.

  5. If you want to cancel use of the default protection profile, select the Do not use protection profile option. By default, no protection profile will be mapped to NSX Profile Configurations that have not yet been mapped to a protection profile or whose mapping was canceled due to the deletion of the protection profile. Virtual machines that are within the scope of these NSX Profile Configurations will be excluded from protection.
  6. Click OK.

    The Selecting protection profile window will close, and the name of the selected protection profile will be displayed in the Protected infrastructure subsection in the upper part of the window.

  7. In the Properties: <Policy name> window, click OK.
Page top