76
VM-Series
Deployment
Guide
Create Policies
Set Up a VM-Series NSX Edition Firewall
Define Policy on Panorama
Step 1
Create Dynamic Address Groups.
1.
Log in to the Panorama web interface.
2.
Select
Object > Address Groups
.
3.
Select the
Device Group
that
you
created for managing the VM-Series NSX edition firewalls in
Create a Device Group and Template on Panorama
.
4.
Click
Add
and enter a
Name
and a
Description
for the address
group.
5.
Select
Type
as
Dynamic
.
6.
Click
Add Match Criteria
. Select the
And
or
Or
operator and
select the
next to the security group name(s) to match
against.
The security groups that display in the match criteria
dialog are derived from the groups you defined in the
Service Composer on the NSX Manager. Only the
security groups that are referenced in the security
policies and from which traffic is redirected to the
VM-Series firewall are available here.
7.
Click
OK
.
8.
Repeat Steps
4
-
7
, to create the appropriate number of Dynamic
Address Groups for your network.
9.
Click
Commit
.
