NSX SpoofGuard
Another powerful feature of NSX is SpoofGuard. The SpoofGuard feature will monitor and manage the IP address of a virtual machine. OK! Why do we need such a feature? If a virtual machine is compromised by chance, what are the outcomes? A hacker can certainly change the IP and bypass all firewall policies and the rest will be history. SpoofGuard gives us that granular control to ensure all IP changes are approved, until when traffic would be blocked. NSX Manager will collect the IP address of the virtual machines as long we have a VMware tool installed and running.
The following methods are supported in SpoofGuard:
Automatically trust IP assignments on their first use: This mode allows all traffic from your virtual machines to pass; additionally, it builds a table of vNIC-to-IP address assignments. That way, we can review this table and make IP address changes. Both IPv4 and IPv6 are supported.
Manually inspect and approve all IP assignments before use: This mode blocks all...
