Abstractions Many people have asked how does someone view what firewall rules are applied to a Virtual Machine. When leveraging Service Composer that provides a policy driven abstraction you can efficiently apply Security Policy to Security Groups. These Security Groups…
Filtering based on Distributed Firewall RuleID When you manage and operate a VMware NSX environment you should be logging to a log management system. If you’ve enabled logging on individual rules they appear a little different in the Log System…
The old mantra of “trust but verify” just isn’t working. “Never trust and verify” is how we must apply security in this era of sophisticated breaches. Looking at 2014 in the rear-view mirror there has been a myriad of security…
Distributed Firewall – Providing tiered security policy through distributed firewall for Micro segmentation Summary This use case demonstrates the use of NSX’s distributed firewall with the aim to restrict lateral compromise of an application tier. Many internet facing assets are…
Distributed Firewall – Using vCenter objects to provide policy enforcement for VM to VM traffic Summary This use case demonstrates the use of NSX’s distributed firewall in conjunction with vCenter object. In addition to Source and Destination IP address and…