HI Team,
DFW use only for filtering pakages between ovelay segments or it also is used for filtering between overlay and vlan segmets?
Thanks
Jose Miguel
You can use VLAN backed segments for DFW policies, micro segmentation etc without any problem.
HTH,
Dragan
Both.
You can use NSX DFW just for micro-segmentation. Layer3m VLANs, etc can still run on the physical routers/switches.
DFW can be done for VLAN backed VMs also, only condition is VMs should be part of NSX prepared cluster.