Application Rule Manager (ARM) can be leveraged on demand to help secure an application by creating security groups and distributed firewall rules for applications with unknown communication parameters.
ARM allows the NSX administrator to select virtual machines that need to be monitored, and while monitoring, ARM will collect the flow information. Once the monitor has been stopped, ARM will generate the recommended security groups and firewall rules for the selected virtual machines that can then be published to the distributed firewall.
