Firewall packet flow when using SDN VXLAN to achieve micro-segmentation

[ScottO]

Good morning,

I have searched the documentation and forums and not discovered any comprehensive documentation about the packet flow and inspection when using multi-node clusters that are connected via SDN VLXAN. The only way that I have been able to achieve microsegmentation is to enable the firewall at all points, Datacenter, Host, VM and then apply rules and/or Security Groups to each VM. I'm still trying to see the practical application of the VNet Firewall as well as how port isolation plays into this at the VNet level.

Any feedback or direction to existing documentation would be greatly appreciated.

Thanks!