Select a
Source
and a
Destination
.
By default, traffic source is set to Policy’s Security Groups. This
option dynamically includes all security groups where this policy
is applied. Alternatively, you can choose to have traffic from any
source redirected to the firewall or specify certain security groups.
However, vSphere requires that Source or Destination (or bother)
be set Policy’s Security Group. If you select Any or specific security
groups for Destination, then Source must be set to Policy’s Security
Group.