Working with NSX Layer-7 DFW Rules

The recently released NSX 6.4.0 introduced quite a few new features and enhancements. The one I really like is the Distributed Firewall (DFW) now has the ability to create Layer-7 (application-based) context for microsegmentation planning and flow control. Admins can also use the Application Rule Manager (ARM) which was introduced in NSX 6.3 to create … Continue reading Working with NSX Layer-7 DFW Rules


NSX DFW Packet Walk

Here in Part 3 of my "NSX Packet Walk Series" I will be reviewing the step-by-step process of capturing and analyzing packets from the Distributed Firewall (DFW) data path. This procedure is very useful during troubleshooting. We are going to accomplish the following tasks after gathering some important information about the environment. Capture packets when … Continue reading NSX DFW Packet Walk