Hello and welcome.
My name is Keith Barker.
In previous skills, we've taken a look at using
both the distributed firewall with
its policies and rules as well as
the gateway firewall with
its policies and rules to control
the flow of traffic through NSX.
In this skill, we're going to take that same concept of
having security policy rules or
going to kick it up a notch by being able to include as
the source in one of our rules to specify that if
this user is a member of
effectively an active directory group,
then go ahead and permit or WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
then go ahead and permit or
deny the traffic based on what we set up in the rule.
This ability to include information from
active directory is known as identity-based firewall,
or as its friends call it IDFW.
So that ability to use in AD,
the group membership information as part of
our security rules is a fantastic feature.
So join me in this skill as we take a look at the logic,
planning out, configuration,
and verification of using identity-based firewalls,
and active directory group membership as WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
a condition for those rules.
Also you in the next video is we take a big picture look at
putting this all together.