cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
McDuff
Level 11
Report Inappropriate Content
Message 1 of 3

SVM Managers - can you have multiple? Can you configure SVMs to not register with an SVM Manager?

Jump to solution

Greetings, I have a some questions that don't seem to be answered in the MOVE documentation.

1.  Can you have multiple SVM Managers in an environment?  If so, where do you configure which SVM Manager a particular SVM uses?  The only setting I see for SVMs under SVM Settings where you set the port used to connect to the SVM Manager.

SVM Manager Port.png

a.  Can you use multiple SVM managers provided they are configured to use different client/server ports?

If you have an SVM Manager in your environment, can you configure your SVMs not to register with the SVM Manager?  How?  By configuring the SVM Manager port with a port that's not being used by the SVM Manager?

1 Solution

Accepted Solutions
jsam
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 3

Re: SVM Managers - can you have multiple? Can you configure SVMs to not register with an SVM Manage

Jump to solution

1) Can you have multiple SVM Managers in an environment?
Response= Yes, but an SVM-MGR should handle up to 100k clients so typically we would suggest a single SVM-MGR is built and placed in a network location where it is visible to all MP clients, MP SVM and ePO.

2) If so, where do you configure which SVM Manager a particular SVM uses?
Response= In MOVE 4.8 AV policy, Options, SVM Assignment. Create additional copies of this policy as required, each specifying the appropriate SVM-MGR IP

3) The only setting I see for SVMs under SVM Settings where you set the port used to connect to the SVM Manager
Response = MOVE SVM - MGR policy selection
3.1) MOVE 4.8 AV policy, Options, SVM Assignment, enable Assign SVM using SVM Manager, specify address using IPV4 rather than hostname. Default port is 8080
3.2) MOVE 4.8 AV policy, SVM settings, SVM configuration, SVM manager port = 8443
3.3) MOVE 4.8 AV policy, SVM Manager Settings, SVM Manager configuration, SVM port = 8443, Client Port=8080, and check if option is enabled "Assign SVM if no rule is defined for the above client" . This will allocate a client to an SVM if tag and IP assignment rules are unpopulated.

4) Can you use multiple SVM managers provided they are configured to use different client/server ports?
Response = As per point 2 above, create additional options policies, specifying your second SVM-MGR IP, and then assign this policy to the appropriate clients / SVM you wish to be serviced by that SVM-MGR

5) If you have an SVM Manager in your environment, can you configure your SVMs not to register with the SVM Manager? How? By configuring the SVM Manager port with a port that's not being used by the SVM Manager?
Response = This should be possible by allocation of policy, or by specifying an invalid port in policy, or by redirecting the initial SVM registration connection on port 80.
Related Kb`s . Will test and respond back
MOVE AntiVirus Multi-Platform clients are reported as unprotected when the Offload Scan Server cannot connect to the Security Virtual Appliance manager: KB86898
How to troubleshoot a MOVE SVA Manager displaying [Connecting] status : KB88944
MOVE AV Multi-Platform clients fail to connect to the Security Virtual Machine manager: KB87960

View solution in original post

2 Replies
jsam
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 3

Re: SVM Managers - can you have multiple? Can you configure SVMs to not register with an SVM Manage

Jump to solution

1) Can you have multiple SVM Managers in an environment?
Response= Yes, but an SVM-MGR should handle up to 100k clients so typically we would suggest a single SVM-MGR is built and placed in a network location where it is visible to all MP clients, MP SVM and ePO.

2) If so, where do you configure which SVM Manager a particular SVM uses?
Response= In MOVE 4.8 AV policy, Options, SVM Assignment. Create additional copies of this policy as required, each specifying the appropriate SVM-MGR IP

3) The only setting I see for SVMs under SVM Settings where you set the port used to connect to the SVM Manager
Response = MOVE SVM - MGR policy selection
3.1) MOVE 4.8 AV policy, Options, SVM Assignment, enable Assign SVM using SVM Manager, specify address using IPV4 rather than hostname. Default port is 8080
3.2) MOVE 4.8 AV policy, SVM settings, SVM configuration, SVM manager port = 8443
3.3) MOVE 4.8 AV policy, SVM Manager Settings, SVM Manager configuration, SVM port = 8443, Client Port=8080, and check if option is enabled "Assign SVM if no rule is defined for the above client" . This will allocate a client to an SVM if tag and IP assignment rules are unpopulated.

4) Can you use multiple SVM managers provided they are configured to use different client/server ports?
Response = As per point 2 above, create additional options policies, specifying your second SVM-MGR IP, and then assign this policy to the appropriate clients / SVM you wish to be serviced by that SVM-MGR

5) If you have an SVM Manager in your environment, can you configure your SVMs not to register with the SVM Manager? How? By configuring the SVM Manager port with a port that's not being used by the SVM Manager?
Response = This should be possible by allocation of policy, or by specifying an invalid port in policy, or by redirecting the initial SVM registration connection on port 80.
Related Kb`s . Will test and respond back
MOVE AntiVirus Multi-Platform clients are reported as unprotected when the Offload Scan Server cannot connect to the Security Virtual Appliance manager: KB86898
How to troubleshoot a MOVE SVA Manager displaying [Connecting] status : KB88944
MOVE AV Multi-Platform clients fail to connect to the Security Virtual Machine manager: KB87960

View solution in original post

jsam
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 3 of 3

Re: SVM Managers - can you have multiple? Can you configure SVMs to not register with an SVM Manage

Jump to solution

To confirm, create a MOVE 4.8 AV policy, Options, SVM Assignment, and set option disable Assign SVM using SVM Manager, save, apply policy to the SVM. 

Once applied, call "mvadm status" on the SVM and it should report NONE against SVM-MGR assignment

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community