When I check the compliance I get a message saying that "Given Services are not enabled on the port group <PORTGROUPNAME>".
I then can apply te hostprofile and the ESX is then "Compliant" - until I do the next "Compliance Check" the the same message appears again. During the "Apply" it is displayed that the firewall configuration will be updated.
The ESX Server have the Cisco Nexus 1000V VEM installed.

Anyone a idea where to check which services this could be?