Configuring and applying NSX Policies in the infrastructure managed by VMware NSX-V Manager
To configure and apply an NSX Policy:
In the VMware vSphere Client console, start the NSX Policy Wizard in the Networking & Security section, Security → Service Composer subsection, on the Security Policies tab.
If you want to protect virtual machines against file threats, at the Guest Introspection Services step of the Wizard, add the Kaspersky File Antimalware Protection service with a user-defined name and the default action (Apply).
If you want to scan outbound traffic of virtual machines, at the Network Introspection Services step of the Wizard, add the Kaspersky Network Protection service and specify the following values for its settings:
User-defined name
Redirect to service – enabled. The setting is responsible for redirecting traffic to Kaspersky Network Protection service.
Source – Policy's Security Groups (selected by default)
Destination – Any (selected by default)
If you want to scan inbound traffic of the virtual machines, at the same step of the Network Introspection Services wizard, add the Kaspersky Network Protection service once again and specify the following values for its settings:
User-defined name
Redirect to service – enabled. The setting is responsible for redirecting traffic to Kaspersky Network Protection service.
Source – Any
Destination – Policy's Security Groups
Finish the NSX Policy Wizard.
In the list of NSX policies on the Security Policies tab, apply the policy (Apply) to the NSX Group that includes the protected virtual machines.
For more information about configuring NSX policies, refer to the Knowledge Base.