Specifications

74 VM-Series Deployment Guide
Deploy the VM-Series NSX Edition Firewall Set Up a VM-Series NSX Edition Firewall
Step 2 Verify that SpoofGaurd is enabled. If not enabled, see Enable SpoofGuard
Step 3 Manually approve the IP address(es) for each guest in Spoofguard; this validates that the approved IP addresses
is the accurate address for that network adapter. For a manually-configured IP address, make sure to add the IP
address to the IP set before approving it in SpoofGuard.
1. Select the new SpoofGuard policy you created to earlier and
View: Inactive Virtual NICs.
2. Select the guest and add the IP address in the Approved IP field and Publish changes.
3. Review and approve all previously approved IP addresses too.
Step 4 Attach the IP sets to the Security Groups on NSX, to enforce policy.
1. Select
Networking and Security > Service Composer > Security Groups.
2. Select Select objects to include > IP Sets, add the IP set object to include.
Steer Traffic from Guests that are not Running VMware Tools