NSX Distributed Firewall as a Security Customs Network: A Practical Mental Model for East-West Zero Trust
TL;DR The customs network shown in the image is a useful way to explain NSX Distributed Firewall microsegmentation. A workload should not communicate with another workload simply because both systems reside inside the same data center. Its identity, application role, environment, destination, requested service, and effective security policy should determine whether the connection is allowed. […]
