Inspecting Traffic for AVS

When switching to the AVS, customers may want to preserve operational continuity with their existing third-party networking and security solutions (AVS). The communication mechanism has nothing to do with the NSX-T Service Insertion/Network Introspection certification process for vSphere or AVS, and third-party platforms may include products from Cisco, Juniper, Palo Alto Networks, and others.

In this chapter, we will take a closer look at the following topics:

• Internet consideration design options for AVS
• Implementing an NVA solution for traffic inspection
• Configuring the Route Server peering

At the time of writing, there are three main ways to provide inbound internet access to resources in your AVS environment and to create outbound access to the internet from AVS.

Those three options are the following:

• An existing internet service hosted in Azure
• Source Network Address Translation (SNAT) managed from AVS
• A...