Question 52 - PCSFE discussion

Deployment of the NSX Distributed Firewall (DFW) must be configured in an NSX environment to ensure proper operation of a VM-Series firewall in order to secure east-west traffic. East-west traffic is the traffic that flows between applications or workloads within a network or a cloud environment.

NSX environment is a private cloud environment that provides software-defined networking (SDN) and security for heterogeneous endpoints and workloads across multiple hypervisors, containers, bare metal servers, or clouds. NSX DFW is a feature that provides distributed stateful firewalling at the hypervisor level for every virtual machine (VM) in an NSX environment. Deployment of the NSX DFW must be configured in an NSX environment to ensure proper operation of a VM-Series firewall in order to secure east-west traffic by enabling features such as service insertion, policy redirection, service chaining, orchestration, monitoring, logging, and automation for VM-Series firewalls and Panorama on NSX environment. VMware Information Sources, User-ID agent on a Windows domain server, and device groups within VMware Services Manager do not need to be configured in an NSX environment to ensure proper operation of a VM-Series firewall in order to secure east-west traffic, as those are not required or relevant components for NSX integration. Reference: [Palo Alto Networks Certified Software Firewall Engineer (PCSFE)], [Deploy the VM-Series Firewall on VMware NSX-T], [What is VMware NSX-T?], [What is NSX Distributed Firewall?]