County residents reach a published permitting HTTPS VIP from the internet. How should the administrator classify that flow for firewall placement?
Select an answer to reveal the explanation.
Short Explanation
Citizens hitting a public VIP are walking through the front door of the county building, not chatting between cubicles. That HTTPS path is north-south, so the Edge Gateway Firewall is the place that sees it first.
Full Explanation
Internet client-to-VIP traffic enters the NSX-T fabric through an Edge and is north-south. Gateway Firewall policy is the control that inspects that path. Distributed Firewall still protects backend VMs east-west, but classifying the citizen HTTPS session as E-W, IDFW user-to-user, or vMotion misplaces monitoring and policy.