topic Re: NON-IP Distributed Firewall Category in VMware NSX Discussions

NON-IP Distributed Firewall Category

9990374530 — Thu, 28 Sep 2023 11:20:49 GMT

Hello experts,

Out of predefined DFW categories (Ethernet > Emergency > Infrastructure > Environment > Application), which category is considered as NON-IP?

Re: NON-IP Distributed Firewall Category

Braao — Thu, 28 Sep 2023 16:59:40 GMT

I don't think I will be able to help you, but I added some tegs to your post so that the community can see and help you.

Re: NON-IP Distributed Firewall Category

EvertAM — Fri, 29 Sep 2023 14:29:48 GMT

Ethernet would be considered non-IP, it is meant for all your L2 rules.

However, the categories themselves do not necessarily restrict you from the rules you can make in them. They are recommendations for to help you with ordering and building your firewall policies.

https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.2/administration/GUID-6AB240DB-949C-4E95-A9A7-4AC6EF5E3036.html

The documentation is for 3.2, but this hasn't really changed between recent versions I believe, it's still the same in 4.x at least.