Securing NSXALB Using NSX
Presentation on securing NSXALB with NSX at UK VMUG The outline of the presentation is how to use the pre-populated security groups deployed by NSXALB into NSX to secure the platform.
Security
Configuring NSX Distributed IDS/IPS
NSX IDS Configuration workflow: Enabling NSX IDSP To enable distributed IDSP for standalone hosts or clusters where traffic passes through NSX virtual network segments – VLAN-backed and overlay. Note: The configuration flow to enable NSX-distributed IDS/IPS is as follows: Security > [Policy Management] IDS/IPS & Malware Prevention > Settings > Shared Within the Define Scope for Malware Prevention & IDS/IPS Deployment, select the cluster … Read more
NSX-T IDFW how-to guide: How to consume NSX-T IDFW efficiently
I’ve had the privilege of working with VMware’s BU and the Livefire teams on an IDFW design that can be consumed at scale. Hopefully, people can make use of my findings. Note: That this design can be consumed by VDI. but in this example i’m am using RDSH. Requirements: Just some critical information in the … Read more
NSX-T IDFW how-to guide: Get NSX-T IDFW to consume a specific OU
NSX-T IDFW (identity firewall) is a great feature that enables customers to create Active Directory group-based Distributed Firewall (DFW) rules within an NSX-T deployment. One of the biggest challenges specifically in larger Active Directory deployments is the total number of users and a total number of groups that NSX-T 3.1.x can consume. At the current … Read more