In this chapter, you will learn how to configure the VMware NSX Distributed Firewall (DFW) and SpoofGuard. We will be looking at the following recipes:

• Verifying NSX DFW component status
• Configuring IP discovery for Virtual Machines
• Working with SpoofGuard
• Excluding Virtual Machines from DFW protection
• Configuring DFW session timeout
• Creating Security Policy Rules from the Firewall Table Menu
• Creating Security Policy Rules from the Service Composer menu
• Verifying DFW rules
• Leveraging the DFW Applied To field
• Deploying Network or Guest Introspection services
• Configuring the Identity Firewall