Within CuriosityCloud you can count on a distributed firewall that is applied in the virtual network for the protection of traffic from layers 2 to 4 and access control.
Distributed firewall rules support direct configuration of specific conditions to select virtual machines. This feature requires the Virtual Machine to be installed with VMtools; otherwise the policy will not be distributed.
The virtual machine must be connected to the vSwitch before the policy can be successfully delivered. The policy is not valid for the virtual machine directly connected to the Edge interface.
By creating and configuring distributed firewall policies, network isolation between virtual machines can be achieved, internal data center traffic can be protected, and the impact of malicious attacks on the internal data center can be reduced.