vSAN encryption was introduced in 6.6 to encrypt the data at both the drive levels i.e., cache and capacity disks that are part of a vSAN datastore. This is so easy to configure, do not require any in guest agents and supports hybrid, all flash , stretched cluster, dedup /