NSX firewall policies in VMware AWS

[rajeevsrikant]

We have NSX running in our on premises & we are using NSX Micro segmentation policies.

Also we are planning to move to Vmware AWS.. In AWS VMware will use NSX-T

So would like to check is there any way we can export the NSX Micro segmentation policies from On prem to VMware NSX-T in AWS ?

What is the best practice to maintain the same NSX Micro segmentation policies in NSX-T in AWS ?

[rajeevsrikant]

any inputs

[hsherwin09]

To my knowledge, this is not supported at this time: Features Supported with NSX-T Documentation.

[rajeevsrikant]

Thanks.

Is there any idea whether VMware is coming up any solution or tool  for this ?

[ebernard]

Rajeev,

Looks like you have a lot of questions around VMC, you should probably contact your dedicated VMware sales team to get in touch with a specialist.

Going back to your question, we do not have an official tool within VMC to import on premises NSX-T rules.

Do you have hundreds or thousand defined rules? If it's just a question of dozens, could be more efficient to do it manually and take the opportunity to clean it.

But you have some "unofficial" ways to export/import rules as per these websites :

- Wiliam Lam blog: ​https://www.virtuallyghetto.com/2019/01/managing-distributed-firewall-rules-in-vmc-using-powershell-...

- A github project: GitHub - tonysangha/PowerNSX-DFW2Excel: Export the NSX for vSphere Distributed Firewall to MS Excel

Hope that helps and don't forget to set my answer as useful.

Cheers

Emmanuel