This section describes custom network and security containers. These containers can be used in Distributed Firewall and Service Composer. In a cross-vCenter NSX environment, you can create universal network and security containers to be used in universal distributed firewall rules. You cannot use universal network and security objects in Service Composer.

Note: Duplicate names are allowed when you create a group with a universal scope. You can provide duplicate names when you select  the Mark this object for Universal Synchronization option for creating the following groups:
  • IP Address Group (IP Set)
  • MAC Address Group (MAC Set)
  • Security Group
  • Services and Service Group