The city's isolated lab must turn Distributed Firewall off globally during a messy packet-reproduction test. Where is that enable/disable control?
Select an answer to reveal the explanation.
Short Explanation
Global DFW off is a marked lab switch on the Security settings page—Policy and Manager each have one. Unplugging vmnics, guest Windows Firewall, and vSAN licenses are not that switch, and production cities keep DFW on.
Full Explanation
NSX Manager exposes a Distributed Firewall enable/disable setting in Security (Policy and Manager interfaces each provide a control) for lab or emergency identify tasks. Disabling physical vmnics, guest Windows Firewall, or storage licenses does not toggle NSX DFW globally. Operators should treat this as a lab GUI location, not as routine production hardening.