Courts administrators notice vMotion of a case-management VM during…

Question

Courts administrators notice vMotion of a case-management VM during host maintenance. Where should they classify that traffic when writing Distributed Firewall application policy?

Accepted Answer

As host management traffic on the vMotion VMkernel, not as guest Application Distributed Firewall — vMotion is the moving van on the loading dock, not the clerks talking inside the courtroom app. It rides the VMkernel, so do not write Application Distributed Firewall on guest ports for it.

Answer

As guest Application Distributed Firewall rules on the VM vNIC for vMotion ports

Answer

As Identity Firewall rules bound to the clerk who last logged into the VM

Answer

As Gateway Firewall north-south because vMotion leaves the building

Courts administrators notice vMotion of a case-management VM during host maintenance. Where should they classify that traffic when writing Distributed Firewall application policy?

Short Explanation

Full Explanation