Deploying VDI assets with endpoint products installed

[RayDHam]

Hello,

I am trying to troubleshoot an issue with deploying VDI assets from a parent image.  Our parent image has most endpoint products installed on it (HIPS, ENS, DLP, Agent, and some other tools).  When all those items are installed, and we clone the parent for deployment, something breaks in the process.  The VDI manager software creates those clones, but it is not sending the data to our AD Server, which then purges those clones due to no communication to the server.  

When we uninstall ENS and HIPS, the process works fine.  I have created policies for ENS firewalls and HIPS firewalls to allow any traffic and assigned that policy to the parents and the Lost and Found pool, because until the VDI children talk to AD, they don't have a proper names yet (and once agent communicates, it dumps them in there).

What am I missing?  I wouldn't think its a problem with the AD due to it working without those 2 end point products installed.  Our VDI management staff asked that we don't deploy these end point products with the agent, due to the way we manage and update our VDI pool... it would require pushing an install twice a week (sometimes more) which is a heavy load to the network for 300+ systems.

Any ideas?  I have also tried to install ENS and HIPS independently without the other, and no luck either. 

Raymond

[DEViANCE]

Hi Ray,

Could you perhaps set the ENS firewall to adaptive mode? that way if it is a firewall issue it would auto create the rules, perhaps access protection is another thing to look at if there is any issues there.

Regards,

Dev

[RayDHam]

Ill look in to the Access Protection this morning.