This section describes the use of pre rulebase.
| Where Can I Use
This? | What Do I Need? |
|---|
The following procedure describes how to create
the security policy rules that will be used to generate NSX-T steering
rules and how to create the security policy Panorama will push to
the VM-Series firewaa for traffic inspection and enforcement.
Don’t
apply the traffic redirection policies unless you understand how the rules work on the
NSX-T Manager as well as on the VM-Series firewall and Panorama. The default policy
on the VM-Series firewall is set to
deny all traffic, which means that
all traffic redirected to the VM-Series firewall will be dropped.
Create security policy rules in the
associated device group. For each security rule set the Rule Type to Intrazone,
select one zone in the associated template stack, and select the Dynamic Address
Groups as the source and destination. Creating a qualifying security policy in
Panorama helps in the creation of a corresponding steering rule on NSX-T Manager
upon steering rule generation and commit in Panorama.
