What you NEED to know about NSX-T Distributed IDS/IPS \\ VMware Security

Ways we can stay in touch!

SOCIALS///

Connect with me on LinkedIn:

[didarmeral]

Awesome job as always! So IDS/IPS would most likely be used against front facing web servers? Those are also probably load balanced someway. In the administration guide it says "Do not enable Distributed Intrusion Detection and Prevention Service (IDS/IPS) in an environment that is using Distributed Load Balancer. NSX-T Data Center does not support using IDS/IPS with a Distributed Load Balancer." What do you think about those 2 things not being able to coexist? What have you seen by your customers?

[mehrandehghan]

Good job man, that was so useful. Thanks s million
Is it possible to you to create a video about implementing tanzu with nsx-t?

[cristhiansaid]

hi, where do you configure Advanced Threat?? like NSX Sandboxing, etc..?

[AEONMata]

Good job and thanks for this video.
Anyway, i was just playin around with IDS and found out that probably wouldn't work right the way you have the rules. When any-any is applied it has no chance of detecting those web rules that are after that. I found this out after adding a message to the logs for each rule. Thus it probably really works the same as DFW on the first hit of the rule.

The other thing that is strange to me is that when I have an any-any rule applied it finds me as finding in communication that has nothing to do with any VM. But in the dashboard it is in the VMs affected.

[abukarmohamed]

What whiteboard device/software are you using?