A water-utility ESXi host shows Unknown realization for Distributed Firewall, and new SCADA-segment rules never appear on the host. What should the administrator check?
Select an answer to reveal the explanation.
Short Explanation
Policy has to be delivered by the host agents, like a work order that never left the truck. If nsx-proxy or fabric is sick, realization stays Unknown. Fix the agent, not a BGP neighbor.
Full Explanation
Data-plane agents such as nsx-proxy must be healthy for the host to realize Distributed Firewall policy. Unknown realization points to fabric or agent health on that host. Workspace ONE UEM, Carbon Black Cloud reputation, and T0 BGP are not the DFW realization path.