With NSX-T 3.0 there have been some really good enhancements with IDFW feature which is mainly used for VDI use cases. This feature enables NSX administrator to create Active Directory user-based Distributed Firewall (DFW) rules. NSX-T 3.0  introduced support of Windows Server 2019. In terms of protocol support now its supports TCP as well UDP and ICMP protocols