Focus

VM-Series Deployment Guide

Use the Post Rulebase to Define NSX-T Steering Rules

Table of Contents

Use the Post Rulebase to Define NSX-T Steering Rules

Learn how to define NSX-T steering rules.

Create Security policy rules in the post rulebase to define NSX-T steering rules.

Create Security policy rules.
1. In Panorama, select PoliciesSecurityPost Rules.
2. Verify that you are configuring the Security policy rules in a device group associated with an NSX-T service definition.
3. Click on the name of a Security policy rule to edit.
4. Set the Rule Type to intrazone (Devices with PAN-OS 6.1 or later).
5. In the Source tab, set the source zone to the zone from the template stack associated with the service definition. Then select a dynamic address group you created previously as the Source Address. Do not add any static address groups, IP ranges, or netmasks as a Source Address.
6. In the Destination tab, Panorama does not allow you to set a destination zone because you set the rule type to intrazone. Then select a dynamic address group you created previously as the Destination Address. Do not add any static address groups, IP ranges, or netmasks as a Destination Address.
7. Click OK.
8. Repeat steps 1 through 7 for each steering rule you require.
Commit your changes to Panorama.
Apply Security Policy Rules to the VM-Series NSX-T EW SEC Centric Firewall.

Use the Pre Rulebase to Define NSX-T Steering Rules

Apply Security Policies to the VM-Series Firewall on NSX-T (East-West)