A monitoring session collects all incoming and outgoing flows for up to 30 vNICs in a given session.
Prerequisites
Before starting a monitoring session, you need to define the VMs and vNICs that need to be monitored.
VMware Tools must be running and current on your Windows desktop VMs.
Selected VMs need to be in a cluster that has firewall enabled (they cannot be on the exclude list).
A default firewall rule of "any allow" that applies to the selected vNICs must be created for the duration of the monitoring session, so that flows to and from the vNICs are not dropped by any other firewall rule.
Procedure
Results
A flow monitoring session has been created for the selected vNICs and VMs.
What to do next
After collecting flows, analyze the flows.