You must have a base license and then you can add an Add-On license on top of the base license.

Base Licenses

The following base license types are available.

NSX Data Center:

  • NSX Data Center Standard
  • NSX Data Center Professional
  • NSX Data Center Advanced
  • NSX Data Center Enterprise Plus
  • NSX Data Center for Remote Office Branch Office (ROBO)
  • NSX Data Center Evaluation
  • NSX for vSphere - Standard
  • NSX for vSphere - Advanced
  • NSX for vSphere - Enterprise
  • NSX for vShield Endpoint
  • VMware Container Networking with Antrea Enterprise (3.2 and later versions)

NSX-T:

The NSX-T licenses are available for 3.0.3.1, 3.1.3.1, 3.2, and later versions.

  • NSX-T
  • NSX-T Professional
  • NSX-T Advanced
  • NSX-T Advanced Limited Edition
  • NSX-T Enterprise Plus
  • NSX-T for Remote Office Branch Office (ROBO)
  • NSX-T Evaluation

Limited Export License

The following limited export license types are available:

  • VMware NSX Enterprise per Processor (Limited Export)
  • NSX Data Center Advanced per Processor (Limited Export)
  • NSX Data Center Evaluation
  • NSX for vShield Endpoint
  • NSX Data Center Distributed Threat Prevention Add-On
Note: For Limited Export Release version, you can add the NSX Data Center Distributed Threat Prevention add-on license only if the VMware NSX Enterprise per Processor (Limited Export) or NSX Data Center Advanced per Processor (for Limited Export) license exists. You cannot delete the VMware NSX Enterprise per Processor (Limited Export) or NSX Data Center Advanced per Processor (for Limited Export) license until the add-on license is deleted.

Security Licenses

Security licenses that are available in NSX-T Data Center v3.1.0 and later:

  • NSX Firewall
  • NSX Firewall with Advanced Threat Prevention
  • NSX Firewall with Bare Metal
  • NSX Firewall Evaluation

NSX Distributed Firewall licenses that are available in NSX-T Data Center v3.2 and later:

  • NSX Distributed Firewall
  • NSX Distributed Firewall with Threat Prevention
  • NSX Distributed Firewall with Advanced Threat Prevention
  • NSX Threat Prevention Add-On for Distributed Firewall
  • NSX Advanced Threat Prevention Add-On for Distributed Firewall, NSX-T Data Center Advanced or NSX-T Data Center Enterprise Plus

NSX Gateway Firewall licenses that are available in NSX-T Data Center v3.2 and later:

  • NSX Gateway Firewall – VM
  • NSX Gateway Firewall – ISO
  • NSX Gateway Firewall with Threat Prevention – VM
  • NSX Gateway Firewall with Threat Prevention – ISO
  • NSX Gateway Firewall with Advanced Threat Prevention – VM
  • NSX Gateway Firewall with Advanced Threat Prevention – ISO
  • NSX Threat Prevention Add-On for Gateway Firewall – VM
  • NSX Threat Prevention Add-On for Gateway Firewall – ISO
  • NSX Advanced Threat Prevention Add-On for Gateway Firewall – VM
  • NSX Advanced Threat Prevention Add-On for Gateway Firewall – ISO

VMware Cloud Provider Program (VCPP) Licenses

VMware Cloud Provider Program (VCPP) licenses that are available in v3.1.1 and later:

  • NSX Data Center SP Base
  • NSX Data Center SP Professional
  • NSX Data Center SP Advanced
  • NSX Data Center SP Enterprise Plus

Add-On Licenses

You must apply all add-on license on top of one of the corresponding base license as listed in the following table.

Note: You cannot delete the base license until the add-on license is deleted.
Table 1. Add-On Licenses (Before v3.2)
Add-On License Base License
NSX Distributed Threat Prevention (Distributed IDS included)

(Introduced in v3.0)

One of the following base license is required:

  • NSX Data Center Advanced
  • NSX Data Center Enterprise Plus
  • NSX Firewall
  • NSX-T Advanced
  • NSX-T Enterprise Plus
NSX Advanced Threat Prevention

(Introduced in v3.1.1)

One of the following base license is required:

  • NSX Data Center Advanced
  • NSX Data Center Enterprise Plus
  • NSX Firewall
  • NSX-T Advanced
  • NSX-T Enterprise Plus
Table 2. Add-On Licenses (From v3.2 and later)
Add-On License Base License
NSX Threat Prevention Add-On for NSX Distributed Firewall

One of the following base license is required:

  • NSX Distributed Firewall
  • NSX Data Center Advanced
  • NSX Data Center Enterprise Plus
  • NSX-T Advanced
  • NSX-T Enterprise Plus
NSX Advanced Threat Prevention Add-On for NSX Distributed Firewall, NSX Data Center Advanced, NSX Data Center Enterprise Plus

One of the following base license is required:

  • NSX Data Center Advanced
  • NSX Data Center Enterprise Plus
  • NSX-T Advanced
  • NSX-T Enterprise Plus
  • NSX Distributed Firewall and NSX Threat Prevention Add-On for Distributed Firewall (Need both)
NSX Threat Prevention Add-On for Gateway Firewall - VM NSX Gateway Firewall - VM
NSX Advanced Threat Prevention Add-On for Gateway Firewall - VM NSX Gateway Firewall - VM and NSX Threat Prevention Add-On for Gateway Firewall - VM (Need both)
NSX-T Advanced Add-On

One of the following base license is required:

  • NSX Distributed Firewall and NSX Threat Prevention Add-On for Distributed Firewall (Need both)
  • NSX Distributed Firewall with Advanced Threat Prevention
  • NSX Distributed Firewall and NSX Advanced Threat Prevention Add-On for Distributed Firewall, NSX Data Center Advanced or NSX Data Center Enterprise Plus (Need both)
NSX-T Enterprise Plus Add-On

One of the following base license is required:

  • NSX Advanced Threat Prevention Add-On for Distributed Firewall, NSX Data Center Advanced or NSX Data Center Enterprise Plus
  • NSX Data Center Distributed Threat Prevention
  • NSX Advanced Threat Prevention
  • NSX Threat Prevention Add On for NSX Distributed Firewall

NSX-T Base Licenses and Dependencies

License Add-On Supported
NSX-T Advanced
  • NSX Advanced Threat Prevention Add-On

    (Introduced in v3.2)

  • NSX Distributed Threat Prevention Add-On

    (Introduced in v3.0)

  • NSX Advanced Threat Prevention Add-On

    (Introduced in v3.1.1)

  • NSX Threat Prevention Add-On for Distributed Firewall

    (Introduced in v3.2)

  • NSX Threat Prevention Add-On for Gateway Firewall

    (Introduced in v3.2)
NSX-T Enterprise Plus
  • NSX Advanced Threat Prevention Add-On

    (Introduced in v3.2)

  • NSX Distributed Threat Prevention Add-On

    (Introduced in v3.0)

  • NSX Advanced Threat Prevention Add-On

    (Introduced in v3.1.1)

  • NSX Threat Prevention Add-On

    (Introduced in v3.2)
NSX-T Advanced Add-On
  • NSX Distributed Firewall and NSX Threat Prevention Add-On for NSX Distributed Firewall
  • NSX Distributed Firewall with Advanced Threat Prevention
  • NSX Distributed Firewall and NSX Advanced Threat Prevention Add-On
NSX-T Enterprise Plus Add-On
  • NSX Advanced Threat Prevention Add-On

    (Introduced in v3.2)

  • NSX Distributed Threat Prevention Add-On

    (Introduced in v3.0)

  • NSX Advanced Threat Prevention Add-On

    (Introduced in v3.1.1)

  • NSX Threat Prevention Add-On

    (Introduced in v3.2)