East-West Network Security - Chaining Third-party Services

After partners register network services such as Intrusion Detection System or Intrusion Protection System (IDS/IPS) with NSX-T Data Center, as an administrator you can configure network services to introspect east-west traffic moving between VMs on an on-premises data center.

Prerequisites

• Partners must register services with NSX-T Data Center.
• ESXi hosts must be prepared as NSX-T Data Center transport nodes by using transport node profiles.

Note:

• Service VMs are only supported on ESXi hosts and not supported on KVM hosts.
• NSX-T Data Center only protects guest VMs running on ESXi hosts.
• NSX-T Data Center does not protect guest VMs running on KVM hosts.