Hi,
As you see, distributed IDS/IPS is a new feature for East-West traffics. Otherwise, you could enable NSX Edge Firewall rules or the other stateful services on T1 level, so that you may deploy T0 in active-active mode.
VCIX-NV & DCV | VCAP-CMA & DTM | VCP-DW
Wechat: love5plus7
.png "AntareSLyu"){kind=avatar}
