This section describes custom network and security containers. These containers can be used in Distributed Firewall and Service Composer. In a cross-vCenter NSX environment you can create universal network and security containers to be used in universal distributed firewall rules. You cannot use universal network and security objects in Service Composer.
Duplicate names are allowed when you create a group with universal scope. You can provide duplicate names when you select Mark this object for Universal Synchronization option while creating the following groups:
IP Address Group
MAC Address Group
Services and Service Group