The school district wants distributed firewall only on the prepared student-info clusters, not citywide on day one. How should DFW be enabled?
Select an answer to reveal the explanation.
Short Explanation
You do not flip every breaker in city hall to light one classroom. Turn DFW on only for the prepared student-info clusters so the rest of the civic estate stays out of the first cutover.
Full Explanation
NSX-T distributed firewall enablement is scoped to prepared clusters or transport nodes. That lets a school-district security rollout start on the clusters that are ready instead of enforcing citywide on day one. Carbon Black and Workspace ONE Access policies do not enable the NSX DFW datapath on ESXi.