I would like to understand the biggest differences between Cisco ACI and VMware NSX.
Also, if you have any technical comparative documents, that would be very helpful.
Thanks for your help!
Senior Infrastructure Engineer at a retailer with 10,001+ employees
Jun 9, 2021
There are some very major differences between both the Products and to name a few.
-Cisco ACI have physical network gear (9K Switches) where the Code runs in ACI Policy Mode & the UCS server where APIC software runs.
-VMware NSX doesn't have any physical network gear of its own, VMware NSX software runs on ESXi hosts(Any Vendor) & even NSX Bare Metal Edge runs on any Vendor hardware(check compatibility)
-Cisco ACI offers both Underlay & Overlay functionality
-VMware NSX is a software and it builds an Overlay tunnel for (VM/Container) communication on top of an already established IP network which can be build on hardware network gear (Cisco Legacy/ACI/Juniper etc.)
-Cisco ACI: To use micro-segmentation on a VM or Container level you will need some other Cisco products
-VMware NSX: Micro-segmentation can be done Out of the Box because DFW Distributed Firewall are applied on the vnic of a VM i.e. on the ESXi kernel.
Being different in many manners but they still define the SDN realm with L2-L7 Network services and what you choose over the other may depend on many other factors like what network gear you already have or if its Green or Brownfield deployment. For example if your infra already have something other than Cisco 9K switches and is well configured then it will make more sense to use NSX to make use of all the SDN functionalities. This is just an example not a recommendation.
Once you know your way around the Cisco ecosystem, using Cisco ACI is not so difficult. It is a global product, so when you change one interface, changes are automatically reflected on every switch. Cisco ACI can connect with both virtualized networks and physical networks.
As with many Cisco solutions, Cisco ACI has a steep learning curve. It is not user-friendly and most of our team would like to see a better GUI. It would be great if we could test upgrades in a simulation before implementing; this could save a lot of rework and downtime.
The key component for us with VMware NSX is the distributed firewall. VMware NSX can segment every application and server based on the ports with which they need to communicate. We can activate the ports we need and disable the ones we don’t. This really helps to keep things very secure and makes VMware NSX very flexible.
We would like to see VMware NSX integrate better with other open-source solutions; integration can be very complex leading many to simply choose not to use VMware NSX at all. We found some maximums can be very limiting, especially with very large environments. VMware can only be used with virtualized networks.
Cisco ACI and VMware have many similar qualities and features. The fundamental difference is that Vmware NSX’s primary focus is on virtualized networks, while Cisco ACI can connect to both virtual and physical networks.
Vmware NSX can provide better levels of granularity and visibility into how your workload performs and functions. Cisco ACI does not provide this.
Because Cisco ACI is more robust and can handle both physical and virtual networks, Cisco ACI might be a more appropriate solution. At the end of the day, it really depends on your organization’s ecosystem and applications, features and utilities needed, and, of course, cost of implementation. You may need one of these solutions or both.
I am the head of infrastructure at a construction company with 1,0001-5000 employees.
We are currently researching VMware NSX and Meraki SD-WAN. What is the biggest difference between the two? Which would you recommend?
Thanks! I appreciate the help.
Well, both products are very good but if you are looking for only SD-WAN Feafure than Cisco Meraki is the perfect solution: it's easy to manage, easy to deploy and deep insight at the packet level.
VMware NSX is the complete package of comprehensive features like Application Load Balancing, routing, switching, micro-segmentation and many more but at a cost! It's very easy to manage from a single pane of glass.
in a nutshell, if you want Application-Aware Load balancing and wan optimization which should be easy to manage and deploy than Cisco Meraki is the right product and if you are looking for a fully integrated solution and have a deep pocket then you should choose VMware NSX.
Head of EMEA Strategic Alliances at Arrow Electronics, Inc
Mar 12, 2020
VMware NSX is all about Software Defined Networking ie virtualizing the 7 layers of switches/routers that we know in the physical HW world. VMware is very successful with this technology acquired from NICERA. SD-WAN stands for Software-Defined WAN which is about networking but NOT at the local level, it is a wide area network. For this VMware made another acquisition which is VeloCloud. Cisco Meraki SD-WAN and VeloCloud are both in the magic quadrant and therefore competing.
PeerSpot’s crowdsourced user review platform helps technology decision-makers around the world to better connect with peers and other independent experts who provide advice without vendor bias.
Our users have ranked these solutions according to their valuable features, and discuss which features they like most and why.
You can read user reviews for the Top 5 Microsegmentation Software Tools t...