Organizations deploying NSX-V often already have physical perimeter firewalls — Palo Alto, Fortinet, Cisco ASA, or Check Point. A common design question: what does NSX do, and what does the physical firewall continue to do? Getting this boundary wrong creates operational complexity without commensurate security benefit. The Principle: NSX for East-West, Physical for North-South The … Read more
The distributed firewall is the feature that justifies NSX-V for most mid-size organizations. Traditional network firewalls sit at the perimeter or at layer boundaries — north-south traffic is controlled, but east-west traffic between VMs on the same network or VLAN moves freely. NSX’s DFW enforces policy at the vNIC level, so every packet between VMs … Read more
vCenter’s role-based access control is one of those configuration areas that gets set up once during initial deployment and then rarely revisited — until someone has more access than they should, or can’t do something they need to, and tracing why requires untangling permissions that accumulated over years. How vCenter Permissions Work vCenter permissions are … Read more