I implemented move AV 4.5 in a vSphere 6.0u2 environment with NSX 6.3.0.
I notice some strange behaviours
> sometimes the enforced on-access policies are wrong
> for some VM the applied tag is "unprotected" also if the protection is working fine
As per the documentation (and confirmed also by the service support) the on access policies MUST be applied in the NSX (by using the service composer) and NOT at the ePO.
I did that but, sometimes, the applied policied is the "my default" applied by default on the "my organization" level and so inherited by the SVA.