Deep Security Virtual Appliance memory usage

Applies to on-premise Deep Security software installations only

The following table lists minimum recommended Deep Security Virtual Appliance memory allocation based on the number of VMs being protected:

Number of virtual machines being protected by the Deep Security Virtual Appliance Recommended memory allocation
1-32 4GB
33-64 6GB
65+ 10GB

The default configuration of the DSVA is to use 4GB of RAM. If you expect to need more than the default 4GB, you will need to modify the DSVA's configuration yourself. There are two options:

  • Modify the configuration of the Virtual Appliance prior to being imported to Deep Security Manager and then to the vCenter, thereby setting the default configuration for all subsequent Deep Security Virtual Appliance service deployments in that vCenter.
  • Modify the memory allocation of the Virtual Appliance on a cases by case basis after it has been imported to the vCenter and deployed as a service on a ESXi.

Configure the DSVA's memory allocation prior to deployment to the vCenter

To change the Deep Security Virtual Appliance's default memory allocation, you must edit the allocation settings in the Appliance's OVF file before it gets imported to the vCenter.

  1. Unzip the Virtual Appliance zip file you downloaded from the Trend Micro Download Center.
  2. Open dsva.ovf in a text editor.
  3. Edit the default memory allocation (4096 MB) to be appropriate for your environment:
    <Item>
    <rasd:AllocationUnits>byte * 2^20</rasd:AllocationUnits>
    <rasd:Description>Memory Size</rasd:Description>
    <rasd:ElementName xmlns:rasd="http://schemas.dmtf.org/wbem/wscim/1/cim-schema/2/CIM_ResourceAllocationSettingData">4096 MB of memory</rasd:ElementName>
    <rasd:InstanceID xmlns:rasd="http://schemas.dmtf.org/wbem/wscim/1/cim-schema/2/CIM_ResourceAllocationSettingData">2</rasd:InstanceID>
    <rasd:Reservation>4096</rasd:Reservation>
    <rasd:ResourceType>4</rasd:ResourceType>
    <rasd:VirtualQuantity>4096</rasd:VirtualQuantity>
    </Item>
  4. Save the OVF file and return it to the zip package.
  5. On Deep Security Manager, go to Administration > Updates Software > Local and import the Virtual Appliance ZIP package.

Configure the memory allocation of an already deployed Deep Security Virtual Appliance

Changing the Deep Security Virtual Appliance's memory allocation settings requires powering off the DSVA virtual machine. Virtual machines normally protected by the Virtual Appliance will be unprotected until it is powered back on.
  1. In your VMware vSphere Web Client, right-click on the DSVA and select Power > Shut Down Guest.
  2. Right-click on the DSVA again and select Edit Settings. The Virtual Machine Properties screen displays.
  3. On the Hardware tab, select Memory and change the memory allocation to the desired value.
  4. Click OK.
  5. Right-click the DSVA again and select Power > Power On.