Get-SecurityPolicy and distributed switch

[MBreidenbach0]

Somehow Get-SecurityPolicy doesn't seem to like my distributed switches:

(Get-VirtualSwitch -standard) | Get-SecurityPolicy

works.

(Get-VirtualSwitch -distributed) | Get-SecurityPolicy

doesn't.

Is this intended ?

There are other ways to do what I want like

     Get-VDSecurityPolicy -VDSwitch

     (Get-VirtualSwitch -name dvswitch).ExtensionData.Config.DefaultPortConfig.SecurityPolicy

but shouldn't Get-SecurityPolicy also work ?

Using PowerCLI 6.5.4

Name                                Version

----                                -------

VMware.DeployAutomation             6.5.1.6997673

VMware.ImageBuilder                 6.5.1.6997673

VMware.PowerCLI                     6.5.4.7155375

VMware.VimAutomation.Cis.Core       6.5.4.6983166

VMware.VimAutomation.Cloud          6.5.1.5375799

VMware.VimAutomation.Common         6.5.4.6979861

VMware.VimAutomation.Core           6.5.2.6234650

VMware.VimAutomation.HA             6.5.4.7147627

VMware.VimAutomation.HorizonView    7.1.0.5307191

VMware.VimAutomation.License        6.5.1.5375648

VMware.VimAutomation.Nsxt           2.0.0.6870461

VMware.VimAutomation.PCloud         6.5.1.5376282

VMware.VimAutomation.Sdk            1.0.0.5334677

VMware.VimAutomation.Srm            6.5.1.5374694

VMware.VimAutomation.Storage        6.5.4.7154886

VMware.VimAutomation.StorageUtility 1.1

VMware.VimAutomation.Vds            6.5.1.5374428

VMware.VimAutomation.Vmc            6.5.4.7086404

VMware.VimAutomation.vROps          6.5.1.5375723

VMware.VumAutomation                6.5.1.5301639

[LucD · Accepted solution]

Imho the Get-SecurityPolicy cmdlet is working as designed.

The VirtualSwitch parameter takes a VirtualSwitch object, not a DistributedSwitch object (which is also returned by Get-VirtualSwitch).

But I do agree that the documentation could be made a bit more explicit to avoid this confusion.