Use IPFIX and Port Mirroring functionality provided by NSX-T to monitor and troubleshoot SDDC networking and security.
By default, SDDC ESXi hosts have access to the overlay network, allowing them to communicate with monitoring and troubleshooting applications deployed as VM workloads in your SDDC. However, you must configure the firewall to allow traffic between the ESXi hosts and the logical segment the workload VMs are attached to. See Creating Firewall Rules to Manage Traffic Between the Compute and Management Networks.
