VMware NSX Reviews

The solution is primarily used for micro-segmentation for the security of virtual machines.

VMware NSX offers some of the best features for security, such as micro-segmentation. This feature allows us to define policies on a per-virtual machine basis. For example, if we have four virtual machines, we can have four different firewalls attached to each of the VMs. This allows us to monitor the traffic between each VM, as they will have to go through two firewalls or two IPs. This added layer of security provides a great benefit to those utilizing the solution.

Despite being somewhat behind in the cybersecurity field, VMware should develop a cloud and a red team to continuously monitor for new malware and ransomware. They must maintain their own cloud to do their own research, and send the resulting hashes or values to all customers using VMware NSX. This will ensure that each customer is regularly updated with the latest malware and ransomware hashes to keep their systems secure.

Web filtering is a good feature that I would like to have added to the solution.

I would like the ability to limit the bandwidth per virtual machine to ensure that I understand the throughput requirements of any application that is running. This way, I can be protected from the risks of a DoS or DDoS attack, which may require a high level of throughput. This limitation would apply to Layer 4 or Layer 5 of the network.

I have been using the solution for three years.

VMware NSX is stable.

The great advantage of VMware is its scalability and hardware independence; The solution is compatible with a wide range of server brands, including Dell, Lenovo, HP, and Cisco.

My job was to offer consultancy, demonstrations, and conceptual approval to the VMware official team and their partners.

Positive

Of all the cybersecurity vendors we have, the installation of VMware products is the most straightforward. The time needed to deploy depends on the purpose of the use case. Complex tasks between two data centers could take up to four days, whereas micro-segmentation would usually take only two days.

I give the solution an eight out of ten. The solution is missing the red teams and R&D necessary to continuously receive updates from the cloud. Additionally, two other features are absent from VMware NSX which are bandwidth limitation and URL filtering.

We have two people using the solution. I'm the only architect, and the other person is mainly responsible for checking logs to determine if any resources are needed and then assigning those resources to the appropriate virtual machines. 

For someone who wants to secure their data center and three-tier application architecture (database, web application, etc.), they should use micro-segmentation with VMware NSX. This would enable them to set policies on a per-virtual machine basis. For example, if each VM has two virtual NICs assigned to it, each virtual NIC would have its own firewall, policy, and IP. This way, even when two virtual machines need to communicate with each other, their traffic will pass through two separate firewalls within the server. In addition to micro-segmentation, NSX also provides switching and routing services. The use of a data center firewall can be cost-effective for enterprise customers, SMBs, and medium-sized customers. By utilizing the routing, switching, and firewall capabilities provided by the data center firewall, the load on data center switches and routing can be reduced, making it a more cost-efficient option. The throughput required by the data center firewall, be it a Fortinet or Palo Alto Checkpoint, is directly proportional to the cost. With increased throughput, the cost of the firewall will also increase. VMware NSX offloads the workload from the data center firewall, taking on the task itself. This is possible without impacting performance because it is a software firewall, so it absorbs all the load from the data center firewall, providing the same security measures as the legacy firewall would.

NSX is a virtual network, and now is the right time for it. Technology-wise, it's actually an advancement in comparison with other solutions. We've been studying it, and so far, so good. NSX is the superior product when it comes to software for virtualized networks.

The non-enterprise version of the solution should be improved.

I want to see the solution expand to more than just the network, for example, perhaps it could provide some VLAN technologies.

I have been distributing this solution for over six years.

I believe the product is very stable.

The product is very scalable. I don't think NSX would have any problems with growth if a company wanted to expand their network and business. One person is enough to manage this solution.

Here in the Philippines, we need more technical support. I don't think they have good support here. There aren't any experts on NSX, only the distributor and reseller, so we have to really invest in training for us to able to understand the product.

Our team is already trained, so the setup is straightforward.

The licensing is renewed every three years. The cost for implementation and renovation are a huge portion of that price.

I think they need to market the solution more so that it can be accessible to more customers, because few are very familiar with it. It's hard to market it because we are provided with less marketing information about it, but in order to grow the product, it has to be properly marketed.

If you are looking for new technology of the future, NSX is one of them, and it will cost you less in power consumption since it's a virtual network as opposed to a pure physical network, which consumes more energy. That's a main advantage, that the operating expense will lessen while at the same time, the technology is great and is a secure network. When you're talking about virtual networks, I think NSX is one of the greatest products and will soon be the leader in the market.

I would rate this solution as a seven out of ten.

This product is a software-defined data center with a cloud-native approach. We mainly use it for application migration of some of the architecture to containerized solutions.

The management platform is great. I really like the management dashboard, the tailor-made assurance, the telemetry, and the ease of integration with all other solutions of VMware, such as vSphere. They also integrate well with other third-party security platforms. It's very easy to give an integration of the cloud tenant of NSX. It's very easy to build and migrate a cloud project.

It's very complex. However, I don't work directly with it typically.

We had started two projects for integration with OpenShift and OpenStack with NSX. It was declared by VMware that this is possible, however, the process is very tricky. The full integration was delayed to wait for a new official release. I don't know the actual stage, as this is something that happened more than a year or two ago. It was the beginning of the pandemic. In any case, the integration with OpenShift, the open-source cloud platform, at the time was in need of work and was (and remains) something required from our customers. 

They have to work more and more on the integration for public cloud services and have cyber security platform integration.

I've been using the solution for about five years. 

The solution is stable. There are no bugs or glitches. It doesn't crash or freeze.

It seems to scale. However, we don't have enough data in order to say how much clients scale out or the performance when a company is trying to scale out an NSX-T environment. We are not a cloud provider. We don't have a cloud environment to test it.

In terms of who is using it on our side, we have about five to seven people who have the operational capability on NSX-T. 

In our organization, we use only a small NSX-T cluster. We have a bigger one for our lab. I can't speak to the usage of our customers where we deployed it.

We're pretty satisfied with technical support.

We previously used OpenShift together with OpenStack. It's a different platform. One is open-source and the other is a commercial platform with vendor support and established customers.

The initial setup is very simple. It's not overly complex.

All the VMware platforms are really easy to implement. They require knowledge, of course. However, if you follow the procedure, the output is good.

The deployment itself doesn't take more than two or three days. 

That said, we have knowledgeable workers that have done NSX and the previous release (not the NSX-T). They have done deployments several times. That's why, each time, it's really easy to do. If you have to do that in a customer production environment, it will take say no more than one week including both the deployment in production and the training for the customer.

We have three people that can handle deployment and maintenance tasks. 

I can handle the implementation myself. We also have trained people inside our organization. We don't need the assistance of integrators or consultants.

I can't speak to the exact licensing costs of the solution.

Most deployments are on-premises or via a private cloud in the case of enterprise clients.

We started several deployments with NSX-T version 3. I can't speak to which version we are on currently.

It works and it is powerful in terms of governance, telemetry, ease of use, and ease of deployment. The operation is very simple. Of course, you have to train someone in order to use it effectively. It's very easy to find training. For us, it's good to have a third party with enough experience in order to support other projects where we don't have enough people in order to do that.

I'd rate the solution at an eight out of ten.

Our primary use case is moving from physical to VM infrastructure.

This solution has given us the ability to move from a physical to a virtual server estate with all of the expected VM benefits of decoupling servers from dedicated hardware.

The most valuable feature is the ability to create, develop, and deploy servers in minutes to hours, rather than days.

It could be cheaper!

I have been using VMware NSX for seven years.

To be able to do the DR and SRM migrations from datacenter to datacenter, we're able to do them with SRM with VXLAN, with the NSX product.

Just being more knowledgeable about the different functions. I think the product is fine. It's just learning more about the product, and how you can benefit from it, and what it's got to offer.

Very stable. We've had great success with it. It's a different mindset for the actual network folks that are used to building an old traditional way, but it's much faster to get things deployed with firewall rules.

It's definitely scalable, however large, however small. We can bring people in with VDI desktops, with a control set already around that, to be able to control what they get without having to create a new VM and recreate all the policies. It's already done upfront.

It's great, if we have any problems at all, we give them a call. If there's something that's new that we're trying to figure out, they're real good about helping us out.

At first, it was a little complex, but it's more internal, just learning a new product and what it can do for you. But once you get all that set up, and done with the collaboration, and the other groups, it's really not that bad.

In terms of selecting a vendor, our end goal is to be able to accomplish a certain function that we need to for the business. But also, if we have any trouble, to be able to call and get some support, and work through those issues without, "You bought the product now, so you're on your own." They've been real good about support.

It's changed the way we do things. It's made things a lot more easy. Once everything's set up, and you have the collaboration from all the other different groups, it just works. It's going to help me be able to do a lot of the DR stuff that I'm working on with VXLAN, working through NSX and all those rule sets.

We use this product for micro-segmentation and network function virtualization.

This is the most scalable product of its type.

It is very good for automation and software-defined networking.

I would like to see improvements made to the certification process. As it is now, you have to do the training with VMware itself, and you have to spend a lot of money doing it, which is very discouraging. 

If you compare other certifications especially from the cloud providers, you can get trained from your choice of training providers and not very expensive or learn on your own at your pace, prepare for exams and pass and your certificate will be issued. In contrast, you have to register under VMware to get training done at minimum of $3000 before your certificate is issued to you. The training costs a minimum of $3,000, which is expensive and should be reduced. 

I have been using this product for more than a year.

Outside of the cloud infrastructure, it is the most scalable network product that I have worked with. It is used in a server farm that contains about 2,000 servers.

We have not needed to contact technical support.

We did not use another network function virtualization product prior to this one.

The initial setup is very straightforward. Our deployment took three months, end to end.

We had a consultant to assist us with the deployment.

We have two or three in-house staff who manage and maintain the solution.

The licensing fees are expensive and we pay on a yearly basis. However, we were able to leverage some of the licenses that we had for an affiliated product, ESXi. There are no costs in addition to the standard licensing fees.

We chose VMware NSX-T because it was the most scalable.

This is a good product and one that I recommend for anybody who does not want to change their existing infrastructure. The problem is that they have to compete with the likes of AWS and cloud providers.

I would rate this solution an eight out of ten.

We use it as a distributed firewall and for security purposes.

It has reduced the number of people on the network team along with the system engineer involved in the security process. So, it is valuable.

We can't go without NSX, so it's invaluable from this perspective.

Its flexibility and integration with other VMware solutions are NSX's most valuable features.

The microsegmentation feature is very useful.

We would to have a reverse proxy. This would add great value to the solution. 

We would also like better integration with the standards on the market. For example, with OSPF, their integration in NSX is very low. It's not a full OSPF integration. It is too thin from a protocol perspective.

The product need to be improved. It is too complex.

The stability used to be perfect. Now, it is okay.

From a distributed firewall perspective, it's a solid solution.

It is scalable by design, so it's perfect.

The technical support is good. We have encountered several problems with NSX, and every time, support has found the solution to resolve the issue. 

In our company, we were starting a hosting solution, so it was by design. We have worked with VMware products for a long time, so it was natural to buy NSX.

It was a complex setup.

We implemented it ourselves.

The solution is expensive.

We did not consider anyone else.

If someone is looking for security in a vSphere environment, I don't know of another solution in the market besides NSX.

We had to buy new hardware in order to introduce NSX into our data center.

We don't use load balancing with this solution.

We don't use vCloud Director.

We use VMware NSX for box integration. If box integration is still a code, we use this technology to understand it.

When we have problems in the Kubernetes cluster inside the XDN or problems in the Container Network Interface (a container integrated with the NSX), we can join the Kubernetes cluster data source. If there is a problem in CNI, we can see the connection with the NSX manager and create alerts.

The alert features are the most valuable.

The integration with other brands is not the best and could be better.

We have been using this solution for almost two years. We are using version 3.1.

It is a stable solution.

It is scalable, and we have 20 users using this solution.

I rate the technical support a ten out of ten. Their support is excellent.

The initial setup was straightforward.

We have had a very good return on investment.

I rate this solution a ten out of ten. I recommend VMware NSX because it's a powerful tool. We can see the flows inside the SDN, which has a lot of power.