When Quarantine Policy is disabled:

  • NSX Cloud does not assign any security groups to the VMs launched in this VPC or VNet. You must assign the appropriate NSX Cloud security groups to VMs to enable threat detection.

    From the Microsoft Azure portal or AWS console:

    • Assign vm-underlay-sg to VMs for which you want to use the underlay network provided by Microsoft Azure or AWS.