Understanding Air-gapped Sites

HCX deployments support air-gap sites where inbound or outbound connections to or from the Internet are not allowed.

In some environments, security policies require systems to be disconnected from internet access. Air-gap sites make no connections to VMware servers for exhanging information. HCX systems deployed in air gap mode do not particiate in the HCX Customer Experience Improvement Program (CEIP). During the HCX activation, if the system detects that air-gap mode has been selected, no internet connections are established.

You select Air-gapped Site Licensing Mode when deploying the HCX OVA in the vSphere client, which occurs prior to the HCX activation procedure. To configure a site for air gap operation, see Deploy the HCX Manager OVA in the vSphere Client.

Considerations and limitations

• Air gap sites can pair with any other site: air-gap or non-air gap.
• Air gap sites support all HCX Services except for WAN Optimization, which requires a connection to VMware.

• Site configured for air-gap operation cannot be changed to remove the air-gap setting. Sites must be redeployed without the air-gap setting to return the site to a non-air gap mode.

• In the Support interface in the HCX Console, the Link last communicated information is not available for air-gap sites.
• The Auto Approve option is not available for downloading log bundles at air-gap sites. For more information, see Gather Technical Support Logs.