VMware NSX-T Data Center Security Skills 2023 5V0-41.21 Reddit Questions

The NSX Edge nodes require access to the Internet to download category and reputation definitions, and a layer 7 gateway firewall rule must be configured on the tier-1 gateway uplink to capture DNS traffic. This will allow the URL Analysis service to analyze incoming DNS traffic and block malicious requests. For more information, please see this VMware Documentation article[1], which explains how to configure URL Analysis on NSX.

[1] 

To use URL Analysis, you will need to have a Tier-1 gateway and a Layer 7 DNS firewall rule on the NSX Edge cluster. Additionally, you will need to configure an OFW rule allowing traffic OUT to the Internet. Lastly, a medium-sized edge node (or higher), or a physical form factor edge is also required as the URL Analysis service will run on the edge node. For more information, please see this VMware Documentation article[1], which explains how to configure URL Analysis on NSX.

[1] 

 Component Manager is used to deploy the Partner Service VM on every host of a cluster configured for guest introspection.

For further reading, see the VMware NSX-T Data Center Administration Guide (  for more information on configuring guest introspection.