In the VM’s summary page we can see the security tags that are applied to this VM and to which security group this VM belongs. From the example: “web-sv-01a” Security Policy: Using security policy we can create templates containing DFW policy approved security admin this is you want to protect” your environment, then apply this on security groups you want to “how “WHAT protect”. Security policy may contain traffic redirection rules to 3rd-party vendors for service chaining. Security policy is part of the service composer building blocks. We can a security policy to more than one security group. In the example below we apply Security Policy” to both Group 1” and Security Group 2”. “Web “Security A different option is to two different security policies to same security groups. This can result in a contradiction between the policies. For example we Policy 1” and Policy 2” to Security Groups”: “Security “Security “WEB The security policy precedency will be with a value, configured by the security admin. “Weight” In the following example we demonstrate this when we create two different security policies: “Allow ICMP SP” and HTTP SP” and apply both to the previously created security group Servers”. “Allow “Web Create ICMP SP”: “Allow
In the VM’s summary page we can see the security tags that are applied to this VM and to which security group this VM belongs. From the “web-sv-01a” example: Security Policy: Using security policy we can create templates containing DFW policy approved security admin this is “how you want to protect” your environment, then apply this on security groups “WHAT you want to protect”. Security policy may contain traffic redirection rules to 3rd-party vendors for service chaining. Security policy is part of the service composer building blocks. We can a security policy to more than one security group. In the example below we apply “Web Security Policy” to both “Security Group 1” and Security Group 2”. A different option is to two different security policies to same security groups. This can result in a contradiction between the policies. For example we “Security Policy 1” and “Security Policy 2” to “WEB Security Groups”: The security policy precedency will be with a “Weight” value, configured by the security admin. In the following example we demonstrate this when we create two different security policies: “Allow ICMP SP” and “Allow HTTP SP” and apply both to the previously created security group “Web Servers”. Create “Allow ICMP SP”:
NSX-dFW_v31.docx