Specifications

56 VM-Series Deployment Guide
Deploy the VM-Series NSX Edition Firewall Set Up a VM-Series NSX Edition Firewall
– (On the NSX Manager) Define the network introspection rules that redirect traffic to the VM-Series
firewall.
 Step 4: Monitor and Maintain Network Security—Panorama provides a comprehensive, graphical
view of network traffic. Using the visibility tools on Panorama—the Application Command Center (ACC),
logs, and the report generation capabilities—you can centrally analyze, investigate and report on all
network activity, identify areas with potential security impact, and translate them into secure application
enablement policies. Refer to the Panorama Administrator’s Guide for more information.
Create a Device Group and Template on Panorama
To manage the VM-Series NSX edition firewalls using Panorama, the firewalls must belong to a device group;
adding a firewall to a template is optional. Device groups allows you to assemble firewalls that need similar
policies and objects as a logical unit; the configuration is defined using the
Objects and Policies tabs on
Panorama. Templates are used to configure the settings that are required for the VM-Series firewalls to operate
on the network; the configuration is defined using the
Device and Network tabs on Panorama. You can for
example, use templates to define administrative access to the firewall or to define log settings and server profiles
on the managed firewalls.
If you are new to Panorama, refer to the Panorama Administrator’s Guide for instructions on setting up
Panorama.
The network introspection rules on the NSX Manager use the IP address as a match criterion to steer traffic to the VM-Series
firewall. If VMware tools is not installed on the guest, see Steer Traffic from Guests that are not Running VMware Tools.
Create a Device Group and a Template on Panorama
Step 1 Log in to the Panorama web interface. Using a secure connection (https) from a web browser, log in using
the IP address and password you assigned during initial
configuration. (https://<IP address>)
Step 2 Add a device group. 1. Select
Panorama > Device Groups, and click Add.
2. Enter a unique
Name and a Description to identify the device
group.
3. Click
OK.
After the firewalls are deployed and provisioned, they will
display under
Panorama > Managed Devices and will be listed
in the device group.
4. Click
Commit, and select Panorama as the Commit Type to save
the changes to the running configuration on Panorama.