If the NSX Edge is configured with firewall rules and a Layer 4 load balancer, the Layer 4 VIP is processed before the firewall rules, thus no need to add an Allow Firewall rule.
- Chapter 14. NSX Edge Network Services and Security
- from VCP6-NV Official Cert Guide (Exam #2V0-641)
- Publisher: VMware Press
- Released: August 2016
Share this highlighthttp://www.safaribooksonline.com/a/vcp6-nv-official-cert/9630141/