The VM-Series firewall for NSX is the VM-Series firewall
that is deployed on the ESXi hypervisor. The integration with the
NetX API makes it possible to automate the process of installing
the VM-Series firewall directly on the ESXi hypervisor, and allows
the hypervisor to forward traffic to the VM-Series firewall without
using the vSwitch configuration; it therefore, requires no change
to the virtual network topology.
The VM-Series firewall for NSX only supports virtual wire interfaces.
On this firewall, ethernet 1/1 and ethernet 1/2 are bound together
through a virtual wire and use the NetX dataplane API to communicate
with the hypervisor. Layer 2 or Layer 3 interfaces are neither required
nor supported on the VM-Series firewall for NSX, and therefore no
switching or routing actions can be performed by the firewall. For
enabling traffic separation in a multi-tenancy environment, you
can create additional zones that internally map to a pair of virtual
wire subinterfaces on the parent virtual wire interfaces, ethernet 1/1
and ethernet 1/2.