While implementing McAfee MOVE, I came across a weird issue where the vShield vmservice-vshield-pg portgroup was not present on the ESXi hosts in the cluster while vShield Endpoint was correctly enabled. This post shortly describes the vShield Endpoint solution and how I fixed this.