NSX Editions

  • Professional

    For organizations needing a basic set of NSX connectivity and security features for single location software defined data center deployments.

  • Advanced

    For organizations needing advanced networking and security features that are applied to multiple sites.

  • Enterprise Plus

    For organizations needing all of the capability NSX has to offer. This edition also entitles customers to VMware vRealize Network Insight Advanced and VMware HCX Advanced.

  • Remote Office Branch Office

    For organizations that need to virtualize networking and security for applications in the remote office or branch office.

NSX Distributed Firewall Editions

NSX offers security capabilities for Zero-Trust scenarios leveraging "Distributed Firewall" product line. Different editions focused on delivering micro-segmentation for east-west traffic leveraging Distributed Firewalls are as listed below:

  • Distributed Firewall

    For organizations needing implement access controls for east-west traffic within the network (micro-segmentation) but not focused on Threat detection and prevention services.

  • Distributed Firewall with Threat Prevention

    For organizations needing access control and select Threat prevention features for east-west traffic within the network.

  • Distributed Firewall with Advanced Threat Prevention

    For organizations needing Firewall, and all advanced Threat prevention features for east-west traffic within the network.

  • Distributed Firewall for Baremetal Servers

    For organizations needing an agent-based network segmentation solution for bare-metal workloads.

VMware NSX Gateway Firewall Editions

NSX offers security capabilities for zone-segmentation and public cloud internet gateway scenarios leveraging the Gateway Firewall product line. The various "Gateway Firewall" editions are listed below:

  • Gateway Firewall

    For organizations needing implement firewalling capabilities for zone segmentation; but not focused on Threat detection and prevention services.

  • Gateway Firewall with Threat Prevention

    For organizations needing implement firewalling capabilities for zone segmentation along with select Threat detection and prevention services offered in the Gateway form factor.

  • Gateway Firewall with Advanced Threat Prevention

    For organizations needing implement firewalling capabilities for zone segmentation along with all advanced Threat detection and prevention services offered in the Gateway form factor.

The Gateway Firewall product can be deployed either as a Virtual Machine (VM) or as an ISO image on physical servers depending upon the license procured. The Gateway Firewall Editions listed above are applicable for both the VM and ISO based deployments.

NSX Edition Combinations

There are several NSX SKUs available for purchase which are a combination of editions. To determine the feature entitlement for those combinations please consult the appropriate columns for the component editions of the combination SKU.