Airport IT must inspect citizen HTTPS that enters the permitting Tier-0 from the internet, not east-west traffic between two overlay VMs. Which Security submenu matches that north-south goal?
Select an answer to reveal the explanation.
Short Explanation
Citizens walking in from the street hit the front door, not the hallway cameras. North-south on the Tier-0 is Gateway Firewall; hallway (VM-to-VM) is Distributed Firewall.
Full Explanation
Gateway Firewall is attached to Tier-0 or Tier-1 gateways and inspects north-south traffic that enters or leaves the overlay through an Edge. Distributed Firewall inspects east-west traffic at the vNIC. Inventory tags and Fabric node lists do not choose that Security submenu. Operators pick Gateway Firewall when the civic goal is internet-to-VIP (or similar N-S) inspection.