WAF on NSX-T

[mhdganji]

Hi,

Is WAF (L7 Web Application Firewall) capabilities added to on-premise NSX-T deployments? If yes, does it need any other add-on or software patch or so? or it is a matter of license? and if yes, which license is needed?

Now, the NSX-V license is enabled in our NSX-T pilot deployment and it says NSX Enterprise vSphere is enabled. Should I expect WAF capabilities on it?

And it's kind of you if I can have the answer to the questions above about IDS/IPS instead of WAF

Best regards,

[Sreec · Accepted solution]

You need to leverage NSX-ALB with an Enterprise license key for WAF protection. 

https://docs.vmware.com/en/VMware-NSX-Advanced-Load-Balancer/20.1.5/WAF_Guide.pdf 

https://avinetworks.com/docs/20.1/setting-up-nsx-alb-basic-edition/