If auto rule generation is enabled, NSX Edge adds firewall, NAT, and routing routes to enable control traffic to flow for these services. If auto rule generation is not enabled, you must manually add firewall, NAT, and routing configuration to allow control channel traffic for NSX Edge services such as Load Balancing, VPN, etc.


  1. Log in to the vSphere Web Client.
  2. Click Networking & Security > NSX Edges.
  3. Select an NSX Edge.
  4. Click Actions > Change Auto Rule Configuration.
  5. Make the appropriate changes and click OK.