VMware NSX 9

NSX 9 is software-defined networking and Zero Trust security for VCF 9. Native VPCs in vCenter, Enhanced Data Path (3x switching) and workload-level micro-segmentation.

Switching performance

Faster deployment

Fewer security incidents

Zero

Trust architecture

Features

NSX 9, The #1 reason for VCF 9

NSX 9 is the key technology that sets VCF 9 apart

Native VPCs in vCenter (NEW)

VPC-first networking managed directly in the vCenter UI, the same mental model as public cloud, on-premises.

Enhanced Data Path (NEW)

Up to 3x higher switching performance via DPU offload and pipeline optimizations.

Micro-segmentation

Granular security policies per workload, the foundation for Zero Trust in your data center.

Distributed IDS/IPS

Intrusion detection and prevention on every virtual network interface, east-west and north-south.

VLAN-to-VPC Migration (NEW)

Built-in tooling for phased migration from legacy VLAN networks to VPC-first architecture.

Multi-Cloud

Consistent policies across on-premises VCF 9, AWS, Azure and Google Cloud.

Introduction

What is NSX 9?

NSX 9 is the network and security layer of VMware Cloud Foundation 9. It virtualizes switching, routing, firewalling and load balancing entirely in software, independent of physical network hardware. NSX is the most important differentiating component that justifies VCF 9 for enterprises with micro-segmentation and Zero Trust requirements.

New in NSX 9

Native VPCs & Enhanced Data Path

The two biggest innovations in NSX 9. Native VPCs make VPC-first networking the default, the same mental model as AWS/Azure, but on-premises and managed directly from vCenter. Enhanced Data Path delivers up to 3x higher switching performance via DPU offload. Together they make NSX 9 the key reason to choose VCF 9.

VPC-first networking in the vCenter UI, just like public cloud
Enhanced Data Path, 3x switching performance via DPU
VLAN-to-VPC migration tooling for phased transition
Native integration with VKS Supervisor and Service Broker

Security

Micro-segmentation & Zero Trust

With NSX’s Distributed Firewall, security is applied directly at the hypervisor. Every piece of east-west traffic is inspected, blocking lateral attacks. This is the foundation for a Zero Trust architecture, and the one component of VCF 9 that has almost no competition in the market.

Firewall policies per workload, not per network segment
Inspection of all east-west traffic within the data center
Identity-based policies linked to Active Directory
Distributed IDS/IPS for real-time threat detection

Services

Our NSX Services

Our certified NSX engineers help design and implement software-defined networking and Zero Trust security, from assessment and VPC architecture to VLAN-to-VPC migration and ongoing policy management.

Analysis of existing network architecture and security posture
NSX 9 architecture design with Native VPCs and micro-segmentation
VLAN-to-VPC migration engagements
Distributed IDS/IPS tuning and policy management

Benefits

Why NSX 9?

Zero Trust Security

VPC-first architecture and micro-segmentation, the strongest security story in the VCF stack.

Network Agility

Deploy complete VPCs and networks in seconds via the vCenter UI or API.

Performance

Enhanced Data Path with DPU offload for 3x higher switching throughput.

Compliance

Meet PCI-DSS, HIPAA, NIS2 and GDPR with policy-driven micro-segmentation.

Use Cases

NSX 9 Use Cases

Zero Trust Data Center

Per-workload micro-segmentation, block lateral movement at the hypervisor level.

Native VPCs

Public-cloud mental model on-premises, fast self-service via vCenter and VCF Automation.

Multi-Cloud Security

Consistent policies across VCF, AWS, Azure and GCP.

Container Networking

Native NSX networking for VKS namespaces and Kubernetes workloads.

Ready for NSX 9?

Contact us for an NSX 9 assessment or a VLAN-to-VPC migration workshop. We would be happy to show you why NSX is the key technology in VCF 9.

Request assessment Bekijk klantcases