Using Application Rule Manager

In this recipe, we will use ARM (Application Rule Manager) in NSX 6.3 to collect flows from multiple virtual machines, analyze them, and create a firewall rules based on the collected flows.

Getting ready

You will need to have the following access and configurations present before proceeding with this recipe:

• Access to the vSphere Web Client
• NSX administrator or enterprise administrator access

How to do it...

Let's start a monitoring session from ARM to collect traffic flows from a three-tier application virtual machine:

1. Log in to the vSphere Web Client UI and navigate to Home | Networking & Security | Flow Monitoring. In the center pane, select the Application Rule Manager tab and click on the Start New Session button on the right. Type the session name and select the object type that you want to monitor with ARM. This can be a virtual machine:

2. Wait for few minutes. If there are traffic flows on the monitored objects, ARM will detect how many sources and flows...