To control the incoming and outgoing network traffic to and from an NSX edge gateway, you create firewall rules.

Procedure

  1. In the top navigation bar, click Networking and click the Edge Gateways tab.
  2. Click the edge gateway.
  3. If the Firewall screen is not already visible under the Services section, click the Firewall tab.
  4. Click Edit Rules.
  5. Click the New On Top button.
    A row for the new rule is added above the selected rule.
  6. Configure the firewall rule.
    Option Description
    Name Enter a name for the rule.
    State To enable the rule upon creation, turn on the State toggle.
    Applications (Optional) To select a specific port profile to which the rule applies, turn on the Applications toggle and click Save.
    Source Select an option and click Keep.
    • To allow or deny traffic from any source address, toggle on Any Source.
    • To allow or deny traffic from specific firewall groups, select the firewall groups from the list.
    Destination Select an option and click Keep.
    • To allow or deny traffic to any destination address, toggle on Any Destination.
    • To allow or deny traffic to specific firewall groups, select the firewall groups from the list.
    Action From the Action drop-down menu, select an option.
    • To allow traffic from or to the specified sources, destinations, and services, select Accept.
    • To block traffic from or to the specified sources, destinations, and services, without notifying the blocked client select Drop.
    • To block traffic from or to the specified sources, destinations, and services, and to notify the blocked client that traffic was rejected, select Reject.
    IP Protocol Select whether to apply the rule to IPv4 or IPv6 traffic.
    Applied To (Optional) From the drop-down menu, select a spectific network to which to apply the rule. You can select either an organization VDC network for which distributed routing is deactivated or an external network uplink.
    Enable logging. To have the address translation performed by this rule logged, turn on the Enable logging toggle.
  7. Click Save.
  8. To configure additional rules, repeat these steps.

Results

After the firewall rules are created, they appear in the Edge Gateway Firewall Rules list. You can move up, move down, edit, or delete the rules as needed.