Check that the systems on which you are installing the Bromium platform meet the following requirements:
| Hardware or Software | Description |
|---|---|
|
CPU |
Intel Core i3, i5, i7 with Intel Virtualization Technology (Intel VT) and Extended Page Tables (EPT) enabled in the system BIOS. AMD processor with Rapid Virtualization Indexing (RVI). Bromium supports most enterprise class AMD CPUs sold since 2011. Supported models have names of type A4/A6/A8/A10 (followed by a four digit number in which the first digit is not 3.) Bromium recommends quad-core AMD CPUs for optimal performance. In VDI/nested virtualization environments, Bromium supports Intel CPUs only. |
|
Memory |
Minimum: 4 GB RAM Recommended: 8 GB RAM It is recommended that you check the amount of available memory by logging into a device after it has been powered on for a minimum of 30 minutes and before any applications have been launched. As a baseline, Bromium recommends that a typical device have the following amount of memory available before installing and enabling isolation: • Windows 7 32-bit with 1500 MB available memory prior to installation • Windows 7, 8.1, or 10 64-bit with 1800 MB available memory prior to installation |
|
Disk |
6 GB free disk space |
|
Operating System |
Microsoft Windows 7 SP1 32-bit or 64-bit (Professional, Enterprise, or Ultimate) Note: Ensure you have the following two prerequisites: Microsoft Windows 8.1 with Update 1 64-bit (Professional, Enterprise) Note: The Japanese language version of Windows 8.1 is not supported. Microsoft Windows 10 versions are supported as follows:
Note: Windows 10 April 2018 Update edition is not compatible with Bromium Secure Platform 4.0 Update 6 and earlier. For information about security features and hardware recommendations for Windows 10 releases, refer to the Microsoft site: http://www.microsoft.com If you are running monitoring only (that is, without isolation), Windows Server 2008 and Windows Server 2012 are also supported. |
Note: Refer to your system manufacturer's documentation for details about enabling virtualization on Intel and AMD processors.
Note: On Windows 8.1, isolation does not protect web browsing sessions open in the Metro version of Internet Explorer. For more information, see the Browser.IEMetro.EnableIEHelperHook setting in Browser Settings.
Note: If you configure enterprise mode using the EMIE site list, ensure you do the following:
1. If the EMIE site list is configured to be on a network path, that network path should be marked as trusted.
2. If the EMIE site list is hosted on a web URL, the TLD should be trusted.
Bromium installation requires the following:
To run isolation in a virtualized environment using:
Isolation can be used with any file type (extension) that is associated with the following supported applications.
Note: If Firefox is already installed on endpoints and has not been launched prior to installing the Bromium platform, you must do the following to ensure browser sessions are isolated in a micro-VM:
1. Launch Firefox to create a new profile for the user. If you have multiple users or if you create new users, you must launch Firefox for each new or additional user.
2. Close Firefox and restart Bromium isolation.
You can now launch Firefox in an isolated micro-VM.
These steps also need to be performed if you create more than one Firefox profile per user.
Note: Microsoft Office shared computer activation licensing is supported; however on some systems, when opening an isolated Word document users may temporarily see a banner stating Office has not been activated.
Note: VirtualBox is not supported on endpoints running AMD processors
Support for endpoints running virtualization-based security (VBS) with the following configuration:
VDI deployments on:
Bromium software has been tested with the following third-party endpoint security product solutions in their standard configurations:
IMPORTANT: Ensure you create appropriate exclusions in the configuration of installed endpoint security products so that they do not interfere with or prevent the normal operation of Bromium products. Necessary actions may consist of excluding all Bromium processes and binaries from the third-party endpoint security product. The absence of exclusions may result in failed Bromium software initialization and slow or blocked browsing and opening of isolated documents. For more information, see Third-party Product Exclusions.
Isolation supports user interfaces in the following languages on the specified version of Windows:
Note: Isolation supports all Windows locales.
Support for Windows 10 Fall Creators Update was introduced in Bromium Secure Platform 4.0 Update 3 and will not work on earlier versions of Bromium products. To upgrade to Windows 10 Fall Creators Update, you must upgrade to Bromium Secure Platform 4.0 Update 3 or later before updating Windows.
If you have already upgraded to Windows 10 Fall Creators Update, see https://support.bromium.com/s/article/Planned-Support-for-Microsoft-Windows-Fall-Creators-Edition for information about resolving this issue.
To enable support for McAfee Endpoint version 9.3 and Symantec DLP version 14.0.1, add the following setting to your policy:
Browser.DLPCheckMode = 1 (on) or 0 (off)
Browser.DLPType = 1 (for McAfee DLP) or 0 (for Symantec DLP)
After you modify this setting, you must reinitialize isolation. To do this, use the Reinitialize Isolation remote command in the controller.