You can create IP sets, IP pools, MAC sets, NSGroups, and NSServices. You can also manage tags for VMs. Create an IP SetAn IP set is a group of IP addresses that you can use as sources and destinations in firewall rules. Create an IP PoolYou can use an IP Pool to allocate IP addresses or subnets when you create L3 subnets. Create a MAC SetA MAC Set is a group of MAC addresses that you can use as sources and destinations in layer 2 firewall rules and as a member of an NS Group. Create an NSGroupYou can configure an NSGroup to contain a combination of IP sets, MAC sets, logical ports, logical switches, and other NSGroups, . You can specify NSGroups as sources and destinations, as well as in the Applied To field, in firewall and DNE (distributed network encryption) rules. Configuring Services and Service GroupsYou can configure an NSService and specify parameters for matching network traffic such as a port and protocol pairing. You can also use an NSService to allow or block certain types of traffic in firewall and DNE (distributed network encryption) rules. Manage Tags for a VMYou can see the list of VMs in the inventory. You can also add tags to a VM to make searching easier.