VM-Series
Deployment
Guide
73
Set Up a VM-Series NSX Edition Firewall
Create Policies
Define Policies to Redirect Traffic to the VM-Series Firewall
Define Policies to Redirect Traffic to the VM-Series Firewall
Step 1
Select
Networking and Security > Service Composer > Security Policies
, and click
Create Security Policy
.
Step 2
Add a
Name
and a
Description
.
Step 3
In the
Network Introspection Services
, click
Add
and enter a
Name
for the service.
Step 4
Set the
Action
as
Redirect to service
, and set the
Service Name
as
Palo Alto NGFW
.
Step 5
Select the service profile that you created earlier;
Palo Alto Networks profile 1
in this workflow
.
This profile
specifies the networks/port groups from which the firewall receives data traffic. It will perform network
introspection services on the port specified in the profile.
Step 6
Use the
Change
link under
Source
and
Destination
to specify the direction of flow of traffic that requires
network introspection. Either the source or destination selection (or both) must be
Policy's Security Groups
,
where you can select the Security Groups you defined earlier.
If, for example, if you want to inspect all incoming traffic from the security groups to the web front end servers
and all outbound traffic from the servers to the security groups, the rule looks as follows:
The completed security policy looks as follows:
