How to proactively change the default firewall rule set use for future Edges

[johnnyadavis02]

Can I proactively change the default firewall rule (or automatically include additional default rules) that are applied to all new NSX Edges?  

To be clear:

• I am interested in a one-time change that will impact all new Edges rather than modifying the default rule after I deploy each Edge.
• I want to change the Edge firewall rules, not the Distributed Firewall rules.

thanks.

[chrisgnoon · Accepted solution]

No, I don't believe this is possible.

If you are using automation you can change/add custom rules upon deployment.  You can also write a script that would pull in the current Edge ID's and deploy custom rules to all the Edges.

I assume the used case for this would be to allow generic traffic like ICMP, DNS and NTP?

[RShankar22]

Through Vcenter there is no such option. The only option through is to Enable/Disable the EDGE firewall after deployment.

If you want to create custom firewall for EDGE then you have use API after creation of EDGE To push the basic configuration which you want to push.