The NSX Advanced Firewall service enables your SDDC to use advanced NSX security features.
NSX Advanced Firewall for
VMware Cloud on AWS gives your SDDC access to advanced
NSX application security features, including:
- NSX Layer 7 Context Profile
- NSX Distributed IDS/IPS
- NSX Identity Firewall
- NSX Intrusion Detection and Prevention Service. (The NSX Malware Prevention service, also described in that document, is not currently available in NSX Advanced Firewall for VMware Cloud on AWS.)
To activate the NSX Advanced Firewall service in your SDDC, open the Integrated Services tab and click ACTIVATE on the NSX Advanced Firewall card. After the service is activated, NSX advanced security features become available on the Networking & Security tab of your SDDC. See About NSX Advanced Firewall Features in the VMware Cloud on AWS Networking and Security guide for details about how to use the new features, and for step-by-step instructions for deactivating the service if you no longer need it.