Update 31st January 2025: Please be aware that the VMware Documentation site has been migrated to it's new home at Broadcom TechDocs. As a result of this, I have been informed that some external links in this site no longer function correctly. If you do find a broken link before it is replaced, please reach out via social media and let me know!
Warning! The content within this article is over 36 months old and, therefore, may be out of date.
HOWTO: Exclude Virtual Machines from Firewall Protection in NSX-V
VMware NSX-V VCAP6-NV VCIX6-NV DFW HOWTO
Published on 29 July 2017 by Christopher Lewis. Words: 188. Reading Time: 1 mins.
Introduction
In this post, we’ll look at the final step of deploying the VMware NSX infrastructure, excluding VMs from the firewall protection. The default rule if DENY ALL which is due to security by design reasons but can cause all sorts of problems!
VMware recommends that the following machines are excluded:
- vCenter Server (including Platform Services Controllers)
- Partner service virtual machines.
- Virtual machines that require promiscuous mode.
- The SQL server that your Windows-based vCenter uses.
- vCenter Web server, if you are running it separately.
Step by Step Guide
Adding Virtual Machines to the Exclusion List
Note:
These steps assume you are not even logged into vCenter Server. Skip the first few steps if you are!
- Using your favourite web browser, navigate to the vCenter Server login page (
https://vcenter.fqdn
).

- Type the appropriate User name and Password and click Login.

- Click Network and Security.

- Click Installation tab and click Management.

- Double Click on the NSX Manager IP Address.

- Click Manage.

- Click Exclusions List.

- Click Add(+).

- Select the VM(s) you want to exclude and click the arrow to move them to the exclusion list.

- Click OK.

And there you have it!
Published on 29 July 2017 by Christopher Lewis. Words: 188. Reading Time: 1 mins.
Related Post(s):
- HOWTO: Deploy the VMware NSX-V Controller(s) ()
- HOWTO: Deploy and Configure the VMware NSX Manager Virtual Appliance - Part 3 ()
- HOWTO: Deploy and Configure the VMware NSX Manager Virtual Appliance - Part 2 ()
- HOWTO: Deploy and Configure the VMware NSX Manager Virtual Appliance - Part 1 ()
- HOWTO: Configuring VMware NSX Licensing ()
Recent Posts:
Blog Categories:
active directory 6
aria automation 9
aria automation orchestrator 1
aria operations 2
aws 2
blog 1
career 1
certificate authority 5
certificates 5
certification 91
cloud management 1
cloudnativecon 1
community 1
fun 1
general 9
hands on labs 1
home lab 2
kubecon 1
kubernetes 1
microsoft 7
nsx 45
nsx v 41
powercli 8
powershell 6
reviews 1
vcap 48
vcap6 2
vcenter 4
vcix 2
vexpert 9
vmug 5
vmware 99+
vmware aria 1
vmware aria automation 9
vmware aria automation orchestrator 1
vmware aria operations 3
vmware cloud 3
vmware cloud director 1
vmware explore 2
vmware identity manager 2
vmworld 36
vrealize automation 80
vrealize automation saltstack config 1
vrealize business 2
vrealize log insight 1
vrealize operations 1
vrealize operations manager 5
vrealize orchestrator 13
vrealize suite 14
vrealize suite lifecycle manager 20
vsan 5
vsphere 9
windows 6
Top Tags:
active directory 6
api 18
barcelona 24
certificates 11
certification 7
howto 33
microsoft 7
multi tenancy 9
nsx v 43
platform services controller 8
powercli 8
powershell 7
psc 6
vcap 9
vcap6 45
vcap6 cma 48
vcap6 nv 37
vcix6 nv 36
vexpert 19
vmug 8
vmware 99+
vmware aria 10
vmware aria automation 9
vmworld 35
vmworld 2016 13
vmworld 2017 9
vra 13
vrealize automation 74
vrealize operations 8
vrealize orchestrator 21
vrealize suite lifecycle manager 11
vrslcm 20
vsan 7
vsphere 12