You can use the Deep Security Manager (DSM) to create Event-Based Task to activate new machines or vMotioned machines to a protected ESX host.
Do the following:
- Log on to the DSM web console.
- Go to Administration tab > Event-Based Task > New > Computer created by system.
- Enable the Active computer after 0 minutes option.
- Assign Security Profile and then enable the Select the Security Profile option.
- Configure a minimum of one (1) condition.
Trend Micro recommends using "Appliance Protection Available" is "True". This means that if Deep Security Virtual Appliance (DSVA) is online on the ESX host where the virtual machine is created or moved, agentless protection will be automatically activated.
Do not use "Appliance Protection Activated". - Create the Event-Based Task.
- Allow VMware view to generate a new virtual machine upon user login.
- Check the DSM web console. When the new machine goes online, it will activate and assign the security profile that you selected.