VMware NSX-T / NSX Gateway Firewall \ New features as of VMware NSX 4.0.11

[@Ajitkumar-vv6oc]

nice explanation. please continue with more security topics of nsx-t.

[@TechUnGlued]

Thank you. I have a few more coming soon about the NSX Application Appliance and Advance Treat prevention.. Stay tuned..

[@paolodavila1098]

Thanks for explaining all this stuff about NSX-T. It's quite hard sometimes to understand how it works all of these features but you're doing great. Subscription deserved!

[@TechUnGlued]

Thanks very much.. Really appreciate it.. Have a good one..

[@7onysWorld]

Amazing stuff

[@TechUnGlued]

Thanks so much. Have a great day.

[@manjunathgonapa4328]

Amazing content. I understand that the GFW enforcement is only on uplink interfaces but is it even technically possible to create new downlink service interface between T0 and T1 and make that T0 downlink interface as GFW enforcement point for the traffic between different T1s?. DFW is another option but I am interested to know if this can be achieved. Thank you.

[@TechUnGlued]

Don;t think you can do that. When attaching the T1 to a T0, the only option NSX gives you is to auto-plumb the connection which creates an overlay network between the two.. Don;t want to say t is impossible, but highly doubt it. Using the DFW is much more efficient, the packet is dropped without it having to hit the wire, and avoids moving packets around to later police them.. Hope this help and have a good one..

[@karimali8219]

Hello can i see is there is any drop traffic on Gateway firewall using CLI

[@TechUnGlued]

Yes You can.. A few things to get for dropped packets are the "get network-stats" command on the edge node.. or if you go directly into the SR of the G/W (shown in my edge packet capture video) you can run the "get interface stats" command. Thanks again for watching and have a great day. Edge Packet Capture video kzbin.info/www/bejne/rqCsnKutf8hsfqM Just posted this. kzbin.info/www/bejne/jGbFpaaXgLB_ppI Enjoy