To configure the distributed firewall, the following prerequisites must be met:

• Log in as a user with the security administrator or enterprise administrator role
• Virtual machines that will be applied with the DFW rule must have the ESXi hosts prepared for NSX
• DFW and VSFWD are enabled and running on ESXi hosts. This is covered in the Verifying NSX DFW components status recipe