Implementing antivirus and other endpoint security measures in virtual environments is often characterized as a trade-off between performance and security. Broadly speaking, there are two approaches:
- Agentless solutions, where the scanning engine resides within the hypervisor and is responsible for all guest VMs.
- Agent-based solutions, where individual scanning engines reside on each guest VM.