NSX Firewall Rule Testing

[vmmedmed]

Is there somewhere in NSX where I can test if a packet will be allowed or denied without having to generate the traffic from (or to) a VM?

e.g. put in Source 10.10.10.100, Destination 10.20.10.100 and TCP port 3306...will it pass or not? In Palo Alto Networks there's

a "test sec policy" I believe that does this.

[bayupw]

If you are on NSX 6.3, try exploring Application Rule Manager

Application Rule Manager (ARM) Practical Implementation - Healthcare - Network Virtualization

Else you can try Traceflow