{"id":9296,"date":"2017-02-10T23:36:38","date_gmt":"2017-02-11T07:36:38","guid":{"rendered":"http:\/\/humairahmed.com\/blog\/?p=9296"},"modified":"2017-12-16T12:12:14","modified_gmt":"2017-12-16T20:12:14","slug":"nsx-v-6-3-cross-vc-nsx-security-enhancements","status":"publish","type":"post","link":"https:\/\/humairahmed.com\/blog\/?p=9296","title":{"rendered":"NSX-V 6.3: Cross-VC NSX Security Enhancements"},"content":{"rendered":"
\n\t\t\t\t\tTweet<\/a>\n\t\t\t\t<\/div><\/div>

\"\"<\/a>
\n 
I also published this blog post about new Cross-VC NSX Security Enhancements in NSX-V 6.3 on the VMware NSX Network Virtualization Blog<\/a> on February 10, 2017. The full blog post is provided below and can also be seen on the VMware NSX Network Virtualization Blog<\/a> site. <\/p>\n

VMware NSX Network Virtualization Blog<\/a><\/strong>
\nTitle: NSX-V 6.3: Cross-VC NSX Security Enhancements
\nAuthor: Humair Ahmed
\nDate Published: February 10, 2017<\/p>\n

NSX-V 6.2 introduced the Cross-NSX feature to allow for NSX logical networking and security across multiple vCenter domains. The ability to apply consistent networking and security across vCenter domains provides for mulitple use cases for Cross-VC NSX: workload mobility, resource pooling, multi-site security, ease of automation across sites, and disaster avoidance\/recovery. <\/p>\n

With the recent release of NSX-V 6.3, several enhancements have been added to the Cross-VC NSX feature to provide for additional capabilities and overall robustness of the solution. In this blog post I\u2019ll discuss the new Cross-VC NSX security enhancements in NSX-V 6.3. For additional information on Cross-VC NSX check-out my prior Cross-VC NSX blog posts.<\/p>\n

The security enhancements for Cross-VC NSX can be grouped into two categories:
\n<\/p>\n

    \n
  1. General Enhancements (Apply Across both Active\/Active and Active\/Standby deployment models)<\/li>\n
  2. Enhancements for Active\/Standby Use Case<\/li>\n<\/ol>\n

    Active\/Active and Active\/Standby above refers to if the application is active at both sites or if it is active at one site and standby at another site (ex: disaster recovery). Enhancements for both of these respective categories are discussed in more detail below.<\/p>\n

    1.) General Enhancements (Apply Across both Active\/Active and Active\/Standby deployment models)<\/strong>

    \"Figure<\/a>

    Figure 1: Cross-VC NSX Active\/Standby and Active\/Active Deployment Model<\/p><\/div><\/p>\n

    \u2013 Multiple Universal Sections for Universal Distributed Firewall (UDFW)<\/strong><\/p>\n

    Prior to NSX 6.3, only one universal section was possible for UDFW; NSX 6.3 allows for multiple universal sections.

    \"Figure<\/a>

    Figure 2: Multiple Universal Sections for UDFW<\/p><\/div><\/p>\n

    Multiple universal sections gives us efficiency in terms of the following:<\/p>\n