Like ARM, endpoint monitoring enables you to see what virtual machines are sending over your network. Whereas ARM only looks at flow data, endpoint monitoring goes one step further and maps application or system processes that are running on the guest OS to network connections that the processes are consuming.
Endpoint monitoring relies on VMware tools to be installed and running on the target virtual machines, and at the time of writing this book, this feature is only available on select Microsoft Windows virtual machines.
