If you want to deactivate the distributed firewall service, you must first disable the default distributed firewall policy.

When you disable the default policy, you can edit the distributed firewall rules, but the rules are no longer applied.


  1. In the top navigation bar, click Networking and then click the Data Center Groups tab.
    The list of data center groups appears.
  2. Click the target data center group.
  3. Click the Distributed Firewall tab on the left.
  4. In the Default Policy card above the distributed firewall rules list, click Disable and confirm the action.


The default policy is disabled. The rest of the distributed firewall rules can be edited but they are not applied.