Deep Security implemintation with VCENTER on Physical machine for 2 ESXIs Questions

Hello

I have 2 ESXi's in a Cluster

VCENTER on a Physical Machine

need to deploy Deep Security 8

my question is : i need the Deep Security OVA to be deployed in this case , right ? if not please advise if the implemintation can be done on VCENTER without the need of deploying the ova on ESXi

is the VCENTER physical machine is enough for installing all the components and run the security features ?

or i need more than host to install deep security Components on ?

please advise also about requirements

thanks and Regards