64
VM-Series
Deployment
Guide
Deploy the VM-Series NSX Edition Firewall
The VM-Series NSX Edition Firewall
Define Policy on Panorama
Step 1
Create Dynamic Address Groups.
1.
Log in to the Panorama web interface.
2.
Select
Object > Address Groups
.
3.
Select the
Device Group
that
you
created for managing the VM-Series NSX edition firewalls in
Create a Device Group and Template on Panorama
.
4.
Click
Add
and enter a
Name
and a
Description
for the address
group.
5.
Select
Type
as
Dynamic
.
6.
Click
Add Match Criteria
. Select the
And
or
Or
operator and
select the
next to the security group name(s) to match
against.
Note
The security groups that display in the match criteria dialog
are derived from the groups you defined in the Service
Composer on the NSX Manager. Only the security groups
that are referenced in the security policies and from which
traffic is redirected to the VM-Series firewall are available
here.
7.
Click
OK
.
8.
Repeat Steps
4
-
7
, to create the appropriate number of Dynamic
Address Groups for your network.
9.
Click
Commit
.
