Does Protect Advanced support multiple subnets and domains, or do I need a one copy per domain?
Sometimes a VM is resolved using a IP address, and sometimes it uses the name of the VM, and looks at the domain to see what IP it is.
First this is what I am doing. The environment that I am testing on has our Beta test, dev and some management VMs (each on their own subnet and own domains). Protect Advanced is installed on 192.168.51.108 and I want to scan and patch the other subnets as well (192.168.21.x, 192.168.11.x, etc). I am testing with a couple of VMs on the .51.x and .21.x networks (2 on each network).
I can scan all 4 VMs fine (when I add the VMs by IP address. If I add vCenter and select a VM I have issues). But I can only do a test deploy with the VMs on the .51.x network (same network as the Protect Advanced is installed on). The VMs on the .21.x network fail with the message 'Could not connect to remote machine via ICMP. The machine may be off the network, turned off, or a network cable is unplugged'. I can ping the VMs fine. I checked vShield and our firewall, but could not see any issues. Then I installed Wireshark in the Protect Advanced VM.
I found it it was quering the domain first to get the IP of the VM. But the VM I wanted to test deploy is on a separate domain, so the domain reply gave a incorrect IP address (192.168.1.x). It gave this address as the VM name matched the production VM (the one I am testing is the dev one). So I changed the dev VM name, removed then re-added it to Protect Advanced. Still failed as it could not resolve the name.
So, does Protect Advanced support multiple subnets and domains? Is my setup somehow wrong? Is there a way to make the program query by IP instead of computer name? This is all just the patches - I still have to look at the anti-virus!
Thanks