I decided to use this one "AutoNSX" https://digitout.net/services/autonsx/. DevOps team is truly happy with it. No scripts, workflow-based, log information is available, RBAC which user/admin which application is segmented, AD integrated. Actually, we are using it as an automation tool for micro-segmentation in a brownfield environment. It creates all objects in NSX like security groups, sections, tags, add tags to VMS that are listed in vRNI as application basically everything that has to be created manually it is automated. and I would say simply to be used even if admin is not familiar with NSX interface there will be no issues to do micro-segmentation
Otherwise, you can use scripts to import /export rules from vRNI it really depends on what you prefer.
