Can a Symantec Data Loss Prevention (DLP) Network Monitor server be installed on a Virtual Machine server?

DLP 15.8 and above:

• Support for Network Monitor on a virtual machine was added to DLP 15.0 when using a Napatech NT20E2, NT4E, NT40A01, and NT40E3 high-speed packet capture card .
• You must have Napatech driver package 8.0.3 (driver version 3.5.1) (Windows Server 2012 R2 and Windows Server 2016) and driver package 8.1.0 (driver version 3.5.0) (RHEL 6x/7x).
• This must be configured with capture cards as PCI pass-through devices in the VMware ESXi platform.
• Any other VM configuration is not supported for Symantec DLP Network Monitor. 
• Though supported, it is always advised to use a physical dedicated server for Network Monitor for ease of setting up and decreasing packet loss through virtualization as well as increasing of performance overall. 

Napatech cards are not supported on Single Server installations.

For more information please review these documents: 

• 15.8 Virtual server support
• Symantec Data Loss Prevention System Requirements and Compatibility Guide, Version 15.8
• 15.8 Implementing Network Monitor
• Symantec Data Loss Prevention Network Monitor and Prevent Performance Sizing Guidelines, Version 15.8