TrendMicro DeepSecurity

[Escalationproto]

Hi,

is it possible to get State of an client-less TrendMicro DeepSecurity protection?

We are trying to get the antivirus state from our VM´s

THX in advance

[Esben_D]

Getting it to show up on the asset page will not be possible. Lansweeper takes it AV information from WMI. And Deepsec info won't be stored there.

What might be possible, and this is a long shot. Is enabling SSH on the appliance and scanning it with Lansweeper. Even if this works it's unlikely it will give back a lot of information. But it might give you some info about versions.

[Escalationproto]

Hi Charles,

the DeepSec Solution is VM-Tools integrated over VM-Tools VShield Drivers. It Doesn´t need any Client installation only the drivers.

It is like an overhead on top of the VM. The only way we are testing the full functionality of the AV is the EICAR Testfile. Shure you can also control it by TrendMicro Consoles but on the Lansweeper it would be pretty nice.

At the moment the state is Server: All servers without Anti-virus software (xx)

Installation is ESXi 6.5.x vCenter vShield Trend Micro Deep Security Manager (Version 10.0.3382)
For each ESXi Host is an AV Appliance installed.

THX for reply

[Esben_D]

Could you elaborate a bit more about how you have TrendMicro DeepSecurity protection implemented, I'm not familiar with it.

If it's running as a service you can scan the service, if not, registry keys might be the only way.