To configure the distributed firewall, the following prerequisites must be met:
- Log in as a user with the security administrator or enterprise administrator role
- Virtual machines that will be applied with the DFW rule must have the ESXi hosts prepared for NSX
- DFW and VSFWD are enabled and running on ESXi hosts. This is covered in the Verifying NSX DFW components status recipe