Steering rules determine what traffic from which guests in the
cluster is steered to the VM-Series firewall.
Auto-Generate Steering Rules
Generates steering rules based on a security
rule that is configured as follows:
Belongs to a parent
or a child device group registered with an NSX Service Manager.
Has the same zone as the source and destination (not any
Has only one zone.
Has no static address group, IP range, or netmask configured for
By default, steering rules generated
through Panorama have no NSX Services configured and the NSX Traffic
Direction is set to inout. After generating steering rules, you
can update individual steering rules to change the NSX Traffic Direction
or add NSX Services. Panorama automatically populates the following
fields (except Description and NSX Services) when you auto-generate steering
Enter the name for the steering rule you
want to display on the NSX Manager. When auto-generated, Panorama
adds the prefix auto_ to each steering rule and replaces any space
in the security policy rule name with an underscore ( _ ).
) Enter a label to describe
the purpose or function of this service definition.
NSX Traffic Direction
Specify the direction of the traffic that
is redirected to the VM-Series firewall.
an INOUT rule on NSX. Traffic of the specified type going between
the source and the destination is redirected to the VM-Series firewall.
Panorama uses this traffic direction for auto-generated steering
—Creates an IN rule on NSX. Traffic of the specified
type going to the source from the destination is redirected to the VM-Series
—Creates an OUT rule on NSX. Traffic of the specified
type going from the source to the destination is redirected to the VM-Series
Select the application (Active Directory
Server, HTTP, DNS, etc.) traffic to redirect to the VM-Series firewall.
Select a device group from the drop-down.
The chosen device group determines which security policies are applied
to the steering rule. Device groups must be associated with an NSX service
The security policy rule that the auto-generated
steering rule is based on.