You can import a firewall configuration XML file you have saved on a central location, and then load the configuration in the firewall table for Region B. The imported configuration overwrites the existing rules. 


  1. Log in to vCenter Server by using the vSphere Web Client.
    1. Open a Web browser and go to https://mgmt01vc51.lax01.rainpole.local/vsphere-client.
    2. Log in using the following credentials.



      User name




  2. From the Home menu, select Networking & Security.
  3. From the Networking & Security section in the Navigator pane, click Firewall.
  4. On the Firewall page, click the Saved configurations tab.
  5. From the NSX Manager drop-down menu, select the IP address of the NSX Manager instance that runs the firewall rules.

    NSX Manager

    IP Address

    NSX Manager for the management cluster

    NSX Manager for the shared edge and compute cluster

  6. On the Saved Configurations tab, click the Import configuration icon. 

  7. In the Import configuration dialog box, locate the firewall configuration XML file and click OK.

    Rules are imported based on rule names. During the import, the firewall ensures that each object referenced in the rule exists in your environment. If an object is not found, the rule is marked as invalid. If a rule references a dynamic security group, the dynamic security group is created in NSX Manager during the import.

    If your current configuration contains rules that are managed by Service Composer, these rules are overwritten when you load the imported firewall configuration.

  8. If your current configuration contains rules that are managed by Service Composer, synchronize the imported rules and have them managed by the Service Composer again..
    1. On the Service Composer page, click the Security Policies tab and select the policy.
    2. From the Actions menu, select Synchronize Firewall Config.