Hello @yafaa1993 ,
you can install Secure Endpoint on the virtual endpoint, as long the OS is supported.
We do not provide scanning options directly on the Hypervisor. Behavioral Protection Engine, as an example, is able to detect and block complex attack scenarios on the endpoint. To do this, we need information like user API calls, Registry activity, network activity, process activity, Windows Event Log and so on. This information is not available on the Hypervisor level.
From a performance perspective, scanning on the Hypervisor Level would free resources, but we still need the insights into the endpoint. From my point of knowledge this is not on our Roadmap. Feel free to reach out to your Cisco representative or use the feedback button in the Secure Endpoint console, so a Feature Request gets generated.
Greetings, Thorsten
