It is recommended to use Policy Mode instead of Manager mode. However, in few cases manager mode can be utilised but it is advised to stick with one interface only.
Below table list use cases for manager mode -
| When to Use Policy Mode or Manager Mode | |
| Policy Mode | Manager Mode |
| Most new deployments should use Policy mode. NSX Federation supports only Policy mode. If you want to use NSX Federation, or might use it in future, use Policy mode. | Deployments which were created using the advanced interface, for example, upgrades from versions before Policy mode was available. |
| | |
| NSX Cloud deployments | Deployments which integrate with other plugins. For example, NSX Container Plug-in, Openstack, and other cloud management platforms. |
Networking features available in Policy mode only:- DNS Services and DNS Zones
- VPN
- Forwarding policies for NSX Cloud
| |
Security features available in Policy mode only:- Endpoint Protection
- Network Introspection (East-West Service Insertion)
- Context Profiles
- New Distributed Firewall and Gateway Firewall Layout
- Categories
- Auto service rules
- Drafts
| Security features available in Manager mode only: |
Below link talks about Policy Mode vs Manager mode in much more details -
https://docs.vmware.com/en/VMware-NSX/4.0/installation/GUID-BB26CDC8-2A90-4C7E-9331-643D13FEEC4A.htm...
Hope this helps.
