The NSX DFW is a L4 firewall, if you require the ability to parse and secure L7 traffic the security partner ecosystem has many integrated options including Palo Alto Networks, Checkpoint Security, Fortinet, Intel Security, Symantec, Trend etc. By using an integrated partner you can leverage the NSX service composer to properly steer the interesting traffic form the relevant workloads.
