Add a Service Chain

1. Select SecurityNetwork Introspection SettingsService ChainsAdd Chain.
2. Enter a descriptive Name and Description (optional) for your service chain.
3. Select the Service Segment that you applied when you deployed the VM-Series firewall.
4. Set the forward path. The service chain is a logical sequence of service profiles, so traffic moves through the services in the order you specify as the forward path.

   1. Select Set Forward PathAdd Profile in Sequence.
   2. Select a service profile. The service column is populated automatically based on the service profile you select.
   3. Click Add.
   4. (Optional) If you have other partner service profiles in your NSX-T environment, click Add Profile in Sequence to add them to this service chain.

      You can select only one service profile per service definition.
   5. Click Save when you have finished adding service profiles.

5. In the Reverse Path column, check Inverse ForwardPath for return traffic to move through the service chain in reverse order.
6. (Optional) If other partner service profiles are selected, set a reverse path.

   Select the same VM-Series service profile set in the Forward Path.

   1. Select Set Reverse PathAdd Profile in Sequence.
   2. Select a service profile. The service column is populated automatically based on the service profile you select.
   3. Click Add.
   4. (Optional) If you have other, service profiles in your NSX-T environment, click Add Profile in Sequence to add them to this service chain.
   5. Click Save when you have finished adding service profiles.
7. Set the Failure Policy—Allow or Block. This defines the action NSX-T takes if a service profile fails.
8. Click Save.