2V0-41.23 Exam Dumps : VMware NSX 4.x Professional

Distributed Firewall on VDS is a feature of NSX-T Data Center that allows users to install Distributed Security for vSphere Distributed Switch (VDS) without the need to deploy an NSX Virtual Distributed Switch (N-VDS). This feature provides NSX security capabilities such as Distributed Firewall (DFW), Distributed IDS/IPS, Identity Firewall, L7 App ID, FQDN Filtering, NSX Intelligence, and NSX Malware Prevention. To enable this feature, the following requirements must be met in the environment:

• The NSX version must be 3.2 and later1. This is the minimum version that supports Distributed Security for VDS.
• The VDS version must be 6.6.0 and later1. This is the minimum version that supports the NSX host preparation operation that activates the DFW with the default rule set to allow.

References:

• Overview of NSX IDS/IPS and NSX Malware Prevention

The following L2 VPN clients are recommended:

1. NSX Managed NSX Edge in a separate NSX Managed environment.

• Overlay and VLAN segments can be extended.

2. Autonomous Edge:

• Enables L2 VPN access from a non-a NSX environment to NSX environments.

• Deployed by using an OVF file on a host that is not managed by NSX.

• Only VLAN segments can be extended.