The firewall for the edge gateway helps you meet key perimeter security requirements, such as building DMZs based on IP/VLAN constructs, tenant-to-tenant isolation in multi-tenant virtual data centers, Network Address Translation (NAT), partner (extranet) VPNs, and user-based SSL VPNs.
The edge gateway firewall capability in the vCloud Director environment is provided by the NSX software. In NSX, this firewall capability is also referred to as the edge firewall. The edge gateway firewall monitors North-South traffic to provide perimeter security functionality including firewall, Network Address Translation (NAT) as well as site-to-site IPSec and SSL VPN functionality.
For more detailed information about the capabilities provided by the NSX software's edge gateway firewall, see the NSX Administration Guide in the NSX documentation.