Docker and HBSS

[ccastbr]

If I understand KB90041 correctly, using ENSL Docker containers may be supported on Linux, but the containers themselves are not protected, only the host that they are on.  It appears that ENS on Windows does not support Docker containers running on a Windows host. 

I have been asked two basic questions:

1) Does McAfee HBSS support protection of Docker containers without installing software in the container, only on the host?     and

2) Is there a configuration of ePO Server that runs within Docker?

Thank you!

[cdinet]

Question # 1 would need to go to the ENS team.

Question # 2 - What do you mean specifically by configuration of epo server?  Are you referring to the epo server software itself, or a point product that would provide protection?  If ePO server, I am not sure exactly how you would want to implement it, so more explanation would be needed.

[ccastbr]

Thank you for the reply and I apologize for my delay.      So the question #2 is whether it would be possible to deploy an ePO Server as a container instead of a VM?     Perhaps the SQL server on another container and the ePO software on a separate container.      We currently use the a pre-made image from DISA to deploy a VM with SQL and ePO which works out fine, however, we were asked whether, for ease of deployment,  the ePO function be deployed as a container?   

I believe I have my answer for question #1 but I can repeat it in the ENS topic. 

Thank you

[cdinet · Accepted solution]

No, you cannot use epo in a container.  

[ccastbr]

Thank you.  That is the answer I expected, but I needed the expert reinforcement.