Views:

There is a setting in Altor Virtual Firewall that needs to be configured so that it may work with Deep Security Virtual Appliance. Otherwise, any interface using port group on the same virtual switch created by Altor will get disabled, except for the Altor Appliance NIC Adapters.

You can resolve this issue by doing the following:

  1. Go to the Altor Management Console > Security Settings > Global.
  2. Disable Infrastructure Configuration Enforcement.

    Here is a description of the Infrastructure Configuration Enforcement:

    VMWare requires a special network for communication between the Altor Module and VMSafe. This network should not have VMs connected to it which are not part of the VMSafe communication process. If someone connects a VM to this network, then this option will allow you to disconnect the VM for strong security.

    In addition, VMWare has a technology called VMCI. Altor has an option which can be used to analyze if this is activated for a VM. If VMCI is activated unintentionally, it could pose a security risk and Altor can write a warning event.

    This prevents the DSVA from connecting to the same network that Altor was connected to.