Broadcom says new VMware vDefend IDPS capabilities can block workload-level exploits in the hypervisor while administrators deploy software patches. The feature is described as distributed virtual patching—not an antivirus agent installed on an ESXi host—and is named for vDefend SSP 5.2 and vDefend 9.1.1, compatible with VMware Cloud Foundation (VCF) 9.1.
What VMware hypervisor protection means in this announcement
In its August 6, 2026 announcement, Broadcom describes vDefend IDPS distributed virtual patching as a way to block workload-level exploits in the hypervisor while teams roll out software patches. The practical aim is to provide a layer of protection during the interval between identifying a vulnerability and applying the relevant software update.
As an Amazon Associate I earn from qualifying purchases.
That is Broadcom’s description of the capability; the announcement does not establish independent validation that it blocks every exploit or protects every configuration. Virtual patching should be treated as a temporary mitigation, not a substitute for keeping the platform patched.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →How the new vDefend capability fits with VMware security
IDPS virtual patching
The new capability is part of vDefend IDPS. Broadcom names vDefend SSP 5.2 and vDefend 9.1.1 as compatible with VCF 9.1. Teams should confirm release notes, subscription entitlements, and deployment prerequisites for their exact environment before planning an implementation.
#1 Best Overall
- Save valuable floor space: 6U wall mount server cabinet Dimensions: 13.78" H x21.65" W x17.72" D.Maximum mounting depth is 14.2"
- Keep critical network equipment secure: glass door and side panels are lockable to prevent unauthorized access. Front door can be installed on either side of the front of the cabinet to satisfy your door swing orientation preference
- Easy equipment configuration: Fully adjustable mounting rails and numbered U positions, with square holes for easy equipment mounting with top and bottom punch-out panels for easy cable access
- Durability: Made of high quality cold rolled steel holds up to 110lb (50kg) (Easy Assembly Required)
- PCI & HIPPA and EIA/ECA-310-E compliant
Distributed Firewall
vDefend Distributed Firewall is a related but distinct control. Broadcom’s March 2025 description says it is built into the hypervisor and applies security to workloads through an API-driven model. That hypervisor integration does not make the firewall feature the same thing as the newly announced IDPS virtual patching.
Other updates announced in August 2026
The same release also describes an ATP 1-2-3 deployment workflow, on-premises malware sandboxing, support for air-gapped environments, a two-node Security Services Platform option, and performance updates. Avi Load Balancer received native API protection for VMs, vSphere Kubernetes Services, and AI workloads. These are additional announcement items, not all features of hypervisor virtual patching.
Rank #2
- Universal 19” Rack Mount Compatibility – Perfect for pro audio, video, IT, and network gear. Compatible with mixers, routers, patch panels, servers, power amps, and more.
- Heavy-Duty Load Capacity – Built to support up to 550 lbs. Ideal for studio gear, DJ setups, server equipment, and AV components that demand serious stability.
- Robust Steel Frame & Design – Made with 1.5mm thick steel and weighs 36 lbs for maximum durability, reduced vibration, and long-term reliability in any setting.
- Mobile & Secure – Preinstalled with 3” industrial-grade caster wheels (lockable), making it easy to move and position your rack exactly where you need it.
- All-In-One Setup Kit Included – Comes with 34 rack screws (5mm & 6mm), a 1U blank spacer, and an assembly tool—ready for fast installation out of the box.
What Broadcom’s performance figures do—and do not—show
Broadcom reports up to 17 Gbps per server and up to 17 Tbps per VCF instance for vDefend IDPS distributed virtual patching. For comparison, it reports higher throughput figures for Distributed Firewall, a separate function:
| Capability | Broadcom-reported figure | Evidence qualification |
|---|---|---|
| vDefend IDPS distributed virtual patching | Up to 17 Gbps per server; up to 17 Tbps per VCF instance | Broadcom says figures marked with its footnote are based on internal tests from July 2026; these are vendor-reported results, not independent benchmark findings. |
| vDefend Distributed Firewall | Up to 22 Gbps on servers with 25G NICs; up to 75 Gbps on servers with 100G NICs; up to 75 Tbps per VCF instance | Broadcom internal testing from July 2026, as identified in the release footnote; a separate firewall capability. |
| Two-node Security Services Platform option | Up to 33% less physical hardware | Broadcom’s estimate based on its test results; it is not a guaranteed reduction for every deployment. |
The figures are useful as vendor-published claims, but they are not enough on their own to predict results in a particular environment. Actual capacity planning should account for the customer’s workload mix, network configuration, and deployment design.
Rank #3
- ADJUSTABLE DEPTH: 4- Post 22U 19" server rack enclosure with 4 vertical rails and adjustable mounting depth 5.7" to 33.0" (14,4cm to 83,8cm); IT rack is compatible with various servers / switches / data / video / AV and other IT networking equipment
- EASY SHIPPING AND ASSEMBLY: Enclosed 22U data rack cabinet ships compact flat-packed to avoid damage and facilitate installation; Include wheels & levelling feet to offer more stability; Home server rack cabinet is only 46.6in (118,3cm) in height
- DESIGN AND VENTILATION: Half height server rack cabinet has lockable and removable door and side panels with vented top allowing airflow; 4 Post 19" rack with 1764lb (800kg) weight capacity (stationary); Computer cabinet rack is EIA/ECA-310-E Compliant
- HARDWARE INCLUDED: Rolling home network rack includes rack mounting and equipment mounting hardware, such as 20 M6 cage nuts / screws, PVC cup washers; Front/rear doors and side panels Keys, 2x allen keys; Rack assembly hardware; Casters and leveling feet
- THE IT PRO'S CHOICE: Designed and built for IT Professionals, this 22U IT Server Cabinet is backed for life, including free lifetime 24/5 multi-lingual technical assistance
Can you install antivirus software directly on ESXi?
No. Broadcom Support says third-party agents and antivirus software are not supported directly on ESXi hosts or the vCenter Server Appliance (VCSA). ESXi is a specialized runtime, not a general-purpose operating system for off-the-shelf security tools. Broadcom recommends using EDR inside supported guest operating systems instead.
For the host layer, Broadcom identifies integrated security features and configurable controls as the baseline. Its guidance names Secure Boot, execInstalledOnly, Lockdown Mode, and installing patches. Agentless monitoring and anti-malware approaches may also be used, but organizations should weigh the exposure created by enabling SSH.
Rank #4
- DURABLE BUILD: Constructed from high-quality Cold Rolled Steel, the NavePoint Consumer Series 12U network cabinet boasts a sturdy, welded frame. Fitting EIA standard 19” networking equipment, this server cabinet confidently supports up to 110 lbs, providing a resilient base for your vital IT gear and equipment
- CONVENIENT DESIGN: This 12U cabinet features a reinforced, heat-treated, tempered glass front door with a security lock. Perfect for applications requiring both security and accessibility, its compact design of 17.72"L x 21.65"W x 24.42"H offers a practical solution for space-constrained settings.
- EASY & CUSTOMIZABLE EQUIPMENT SET UP - The 12U IT cabinet, with removable side panels and security locks, offers customization at its finest. Whether it's for an efficient device or cable management, this data cabinet ensures secure, adaptable configurations that suit your networking server requirements
- ENHANCED VENTILATION & SECURITY - Built-in fans and flow-through ventilation work to prevent overheating, ensuring optimal operation of your equipment. The reinforced, lockable tempered glass front door not only boosts security but also facilitates easy monitoring of installed equipment.
- SAFETY & COMPLIANCE - All NavePoint products are built to industry standards.
How to evaluate the protection for your environment
Before adopting a security control or changing an ESXi workflow, identify which layer and threat it addresses. A hypervisor exploit mitigation, workload segmentation policy, guest operating-system EDR agent, and network or API protection solve different problems.
Free tools Windows power users keep installed
One-click scans. No signup required.
- Confirm platform compatibility: Check the release notes and entitlements for the VCF and vDefend versions actually deployed; the announcement identifies VCF 9.1 compatibility for vDefend SSP 5.2 and vDefend 9.1.1.
- Map the protection layer: Establish whether the requirement is exploit mitigation at the hypervisor layer, segmentation between workloads, endpoint protection inside guest operating systems, or network/API security.
- Check deployment constraints: Determine whether on-premises or air-gapped operation matters and whether the announced deployment model and prerequisites fit the environment.
- Keep patching in the plan: Treat virtual patching as time to roll out software patches, not permission to defer them indefinitely.
- Assess evidence appropriately: Distinguish Broadcom’s internal July 2026 performance testing from independent benchmarking, and validate performance against the organization’s own workloads and design.
Why this is not an antivirus agent for the hypervisor
The phrase “hypervisor protection” can suggest software installed inside ESXi, but that is not what Broadcom describes here. The announcement concerns vDefend IDPS distributed virtual patching, while Broadcom Support’s host guidance explicitly says third-party agents and antivirus software are unsupported directly on ESXi and VCSA. Keeping that distinction clear helps avoid an unsupported host installation and separates platform-level controls from endpoint security running in supported guest operating systems.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
