Firewall

NSX-V and Physical Firewalls: Finding the Right Boundary

by

Organizations deploying NSX-V often already have physical perimeter firewalls — Palo Alto, Fortinet, Cisco ASA, or Check Point. A common design question: what does NSX do, and what does the physical firewall continue to do? Getting this boundary wrong creates operational complexity without commensurate security benefit. The Principle: NSX for East-West, Physical for North-South The … Read more

NSX-V Micro-Segmentation: Applying Distributed Firewall in Practice

by

The distributed firewall is the feature that justifies NSX-V for most mid-size organizations. Traditional network firewalls sit at the perimeter or at layer boundaries — north-south traffic is controlled, but east-west traffic between VMs on the same network or VLAN moves freely. NSX’s DFW enforces policy at the vNIC level, so every packet between VMs … Read more