What is AppDefense?

AppDefense is a data center endpoint security product that protects applications running in a virtualized environment.

AppDefense learns the intended state of set applications, and responds if the app deviates from its intended state.

How does it work?

AppDefense works inside the vSphere hypervisor to learn and monitor the behavior of an application running in the VM (virtual machine).

The chance of AppDefense being compromised is greatly reduced due to its position inside the vSphere hypervisor.

AppDefense takes a proactive approach by learning and understanding an application’s intended state of behavior. After learning the intended state, AppDefense automatically responds if behavior deviates from the intended state.

After AppDefense detects a threat, AppDefense automates a response using vSphere and NSX DataCenter allowing for:

• Block process communication.
• Snapshot an endpoint for forensic analysis.
• Suspend or shut down endpoint.

Installation Steps:

1. AppDefense Manager - No installation is required. The service is provisioned in the cloud. You will be sent an email with log-in information.
2. Appliance - Install the appliance on-premise in the management cluster. You will need one appliance for every vCenter. Following this, you will register the appliance in the manager. 3.Host component- vib only- no reboot required. 4.Guest module- enable guest integrity and then install guest modules through VMtools. (Please note this will require a reboot.)