Your understanding is correct. This IDS/IPS engine is part of the distributed firewall, which does not require NSX overlay segments to function.
View solution in original post
