If you want to deactivate the distributed firewall service, you must first deactivate the default distributed firewall policy.

When you deactivate the default policy, you can edit the distributed firewall rules, but the rules are no longer applied.


  1. In the top navigation bar, click Networking and then click the Data Center Groups tab.
    The list of data center groups appears.
  2. Click the target data center group.
  3. Click the Distributed Firewall tab on the left.
  4. In the Default Policy card above the distributed firewall rules list, click Disable and confirm the action.


The default policy is deactivated. The rest of the distributed firewall rules can be edited but they are not applied.