VMware vShield Release Notes

vShield Endpoint Drivers | 19 NOV 2010 | Build 326342

For organizations that want to leverage the benefits of cloud computing without sacrificing security, control or compliance, the VMware vShield family of security solutions provides comprehensive protection for virtual datacenters and cloud environments. vShield enables customers to strengthen application and data security, improve visibility and control, and accelerate IT compliance efforts across the organization.

vShield includes virtual appliances and services essential for protecting virtual machines. vShield can be configured through a web based user interface, a vSphere Client plug-in, a command line interface (CLI), and REST API.

These release notes contain the following sections:

What's New in This Release

These release notes support an update to the vShield Endpoint Thin Agent (MSI) drivers. These drivers can be downloaded and installed over the vShield Endpoint 1.0.0 or vShield 1.0.0 Update 1 drivers. You do not need to re-install vShield 4.1.0, vShield 4.1.0 Update 1, vShield Endpoint 1.0.0, or vShield 1.0.0 Update 1.

Installation Notes for This Release

Before you install this release:

  • Read the vShield Quick Start Guide for guidance on installing vShield Endpoint Thin Agent drivers.
  • Read the vShield Administration Guide for workflows describing vShield system management, such as setting up firewall protection, analyzing traffic sessions, configuring edge services, and event and status monitoring.
  • Read the vShield API Programming Guide for instructions on managing your vShield deployment via REST API.

Known Issues

The are no known issues with the vShield Endpoint Thin Agent drivers for this release.

Resolved Issues

The following issues have been resolved in this update of the vShield Endpoint Thin Agent drivers.
  • BSOD may happen if an ODS is terminated more than once. For example, this can happen if the ODS is terminated and the OS is shutting down. As a partial workaround for this bug callers to EPSecTerminate must ensure that the ODS is in EPSEC_ODS_PAUSED or EPSEC_ODS_FINISHED state prior to terminating ODS.
  • Under certain circumstances the vSep driver can be blocked indefinitely if the file it tries to scan had an oplock on it and the oplock is being broken.
  • vSep drivers can fail to load automatically on Windows 7, Windows Vista, and Windows 2008. This will disable security for the virtual machine.
  • Running a virtual machine that has the vSep drivers installed but is not connected to the vSep host module (aka LKM) performance will be considerably degraded. Boot time will be considerable longer and applications will take longer to load.
  • If an application creates or opens a file on a network drive and disable caching for the file (e.g., FILE_FLAG_NO_BUFFERING) the system will BSOD.

Top of Page