Create Steering Rules on NSX Manager

Select
Networking and Security
Service Composer
Security Policies
and click
Create Security Policy
( ).
Add a rule
Name
.
Add a network introspective service.
Select
Network Introspection Service
and click the green plus icon.
Name
the network introspection service and add a
Description
.
Select
Redirect to Service
under Action.
Select your service definition under Service Name.
Select you service profile under Profile.
Select a
Source
and a
Destination
. By default, traffic source is set to Policy’s Security Groups. This option dynamically includes all security groups where this policy is applied. Alternatively, you can choose to have traffic from any source redirected to the firewall or specify certain security groups. However, vSphere requires that Source or Destination (or bother) be set Policy’s Security Group. If you select Any or specific security groups for Destination, then Source must be set to Policy’s Security Group.
(Optional) Select specific network services to be redirected to the firewall. If you choose any service or services, all other traffic will not be redirect to the firewall.
Click
OK
.
Repeat steps 1 through 6 to add additional network introspection services.
Click
Finish
to save your configuration.

Apply redirection policy to security groups.
Highlight a security policy by clicking it.
Select
Networking and Security
Service Composer
Security Policies
and click Apply Security Policy ( ).
Apply the redirection rules by checking all appropriate zones.
Click
OK
.