Hi,
I'm trying to set up a lab on an ESXi box runing nested ESXis to play with NSX and PaloAlto FW.
(play as in learning setup 
In so doing, I'm discovering the dvfilter-maclearn fling which is great to minimize the impact of nested on the networking virtualization.
But it is geting hard to understand some issues, and I don't find documentation on the working of the features used.
(Issue being, e.g., that a VM is getting TX filtered by an sfw filter that NSX is not controling)
Also, the fling says to use filter4 but that hook is the one Panorama (Palo Alto Networks controller) uses for its FW Agents.
I would appreciate any pointers/string ends to start pulling
-Carlos