Product offerings for VMware NSX for vSphere 6.2.x, 6.3.x and 6.4.x
Article ID: 341853
Updated On:
Products
VMware HCX
VMware NSX Networking
Issue/Introduction
This article provides information on:
- Licensing editions of VMware NSX for vSphere 6.x and list of features associated with the various licensing editions in VMware NSX for vSphere 6.2.x, 6.3.x and 6.4.x.
- Licensing editions of VMware NSX Data Center for vSphere 6.4.1+ and list of features associated with the various licensing editions in VMware NSX Data Center for vSphere 6.4.1+.
Environment
VMware NSX for vSphere 6.4.x
VMware NSX for vSphere 6.2.x
VMware NSX for vSphere 6.3.x
VMware NSX for vSphere 6.2.x
VMware NSX for vSphere 6.3.x
Cause
paseirnvads
Resolution
NSX for vSphere 6.2.x, 6.3.x, 6.4.x
VMware NSX has been available as a platform with multiple license tiers since May 3, 2016. The tiers of NSX licenses are as follows:- NSX Standard Edition – For organizations needing agility and automation of the network.
- NSX Advanced Edition – For organizations needing Standard, plus a fundamentally more secure data center with micro-segmentation.
- NSX Enterprise Edition – For organizations needing Advanced, plus networking and security across multiple domains.
The following table outlines specific functions available by edition. NSX is available as a single download image with license keys required to enable specific functionality.
Note: NSX Standard, Advanced, and Enterprise license keys are effective starting from NSX 6.2.2 onwards.
Note: NSX Standard, Advanced, and Enterprise license keys are effective starting from NSX 6.2.2 onwards.
NSX Data Center for vSphere 6.4.1+
VMware NSX Data Center is available as a platform with multiple license tiers effective June 5, 2018. The tiers of NSX licenses are as follows:- NSX Data Center Standard: For organizations that need agility and automation of the network.
- NSX Data Center Professional: For organizations that need Standard, plus micro-segmentation. They may have public cloud endpoints.
- NSX Data Center Advanced: For organizations that need Professional, plus advanced networking and security services and integration with a broad ecosystem. They may have multiple sites.
- NSX Data Center Enterprise Plus: For organizations that need the most advanced capabilities of NSX Data Center, plus vRealize Network Insight for network visibility and security operations, and VMware HCX for hybrid cloud mobility.
- NSX Data Center for Remote Office Branch Office: For organizations that need to virtualize networking and security for applications in the remote office or branch office.
Note: NSX Data Center Standard, Professional, Advanced, Enterprise Plus, and Remote Office Branch Office license keys are effective starting from NSX 6.4.1 onwards.
| NSX for vSphere 6.2.x, 6.3.x and 6.4.x** | NSX for vSphere 6.4.1+ | |||||||
| Feature | Standard | Advanced | Enterprise | NSX Data Center Standard | NSX Data Center Professional | NSX Data Center Advanced | NSX Data Center Enterprise Plus | NSX Data Center for Remote Office Branch Office |
| Hypervisors Supported | ||||||||
| Platform | ||||||||
| ESXi* | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| vCenter* | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Cross vCenter Networking & Security | No | No | Yes | No | No | Yes | Yes | Yes |
| Controller Architecture | ||||||||
| NSX Controller | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Universal Controller for X-VC | No | No | Yes | No | No | Yes | Yes | Yes |
| Optimized ARP Learning, BCAST suppression | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| Switching | ||||||||
| Encapsulation Format | ||||||||
| VXLAN | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| Replication Mode for VXLAN | ||||||||
| Multicast | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| Hybrid | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| Unicast | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| Overlay to VLAN bridging | ||||||||
| SW Bridge (ESXi-based) | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| Hardware VTEP (OVSDB) with L2 Bridging | No | No | Yes | No | No | Yes | Yes | No |
| Universal Distributed Logical Switching (X-VC) | No | No | Yes | No | No | Yes | Yes | Yes |
| Multiple VTEP Support | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| Routing | ||||||||
| Distributed Routing (IPv4 Only) | ||||||||
| Distributed Routing - Static | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| Distributed Routing - Dynamic Routing with BGP | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| Distributed Routing - Dynamic Routing with OSPF | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| Equal Cost Multi-Pathing with Distributed Routing | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| Universal Distributed Logical Router (X-VC) | No | No | Yes | No | No | Yes | Yes | Yes |
| Dynamic Routing without Control VM (Static Only) | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| Active-standby Router Control VM | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| Edge Routing (N-S) | ||||||||
| Edge Routing Static - IPv4 | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Edge Routing Static - IPv6 | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Dynamic Routing with NSX Edge (BGP) IPv4 | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Dynamic Routing with NSX Edge (OSPFv2) IPv4 | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Equal Cost Multi-Pathing with NSX Edge | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Egress Routing Optimization in X-VC | No | No | Yes | No | No | Yes | Yes | No |
| DHCP Relay | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Active-Standby NSX Edge Routing | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| VLAN Trunk (sub-interface) support | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| VXLAN Trunk (sub-interface) support | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| Per Interface RPF check on NSX Edge | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Services | ||||||||
| NAT Support for NSX Edge | ||||||||
| NAT Support for NSX Edge | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Source NAT | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Destination NAT | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Stateless NAT | ||||||||
| ALG Support for NAT | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| NAT64 | No | No | Yes | No | No | Yes | Yes | No |
| DDI | ||||||||
| DHCP Server | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| DHCP Relay | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| DNS Relay | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| VPN | ||||||||
| IPSEC VPN | No | No | Yes | No | Yes | Yes | Yes | Yes |
| SSL VPN | No | No | Yes | No | Yes | Yes | Yes | No |
| L2 VPN (L2 extension with SSL VPN) | No | No | Yes | No | Yes | Yes | Yes | No |
| 802.1Q Trunks over L2 VPN | No | No | Yes | No | Yes | Yes | Yes | No |
| GRE Tunnels | No | Yes | Yes | No | Yes | Yes | Yes | Yes |
| Security | ||||||||
| Firewall - General | ||||||||
| Single UI for Firewall Rule Enforcement - NS+ EW | No | Yes | Yes | No | Yes | Yes | Yes | Yes |
| Spoofguard | No | Yes | Yes | No | Yes | Yes | Yes | Yes |
| Firewall Logging | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Rule Export | No | Yes | Yes | No | Yes | Yes | Yes | Yes |
| Auto-save & Rollback of Firewall rules | No | Yes | Yes | No | Yes | Yes | Yes | Yes |
| Granular Sections of Firewall rule table | No | Yes | Yes | No | Yes | Yes | Yes | Yes |
| Distributed Firewall | ||||||||
| DFW - L2, L3 Rules | No | Yes | Yes | No | Yes | Yes | Yes | Yes |
| DFW - vCenter Object Based Rules | No | Yes | Yes | No | Yes | Yes | Yes | Yes |
| Identity Firewall Rules for VDI (AD Integration) | No | Yes | Yes | No | No | Yes | Yes | Yes |
| IPFix Support for DFW | No | Yes | Yes | No | Yes | Yes | Yes | Yes |
| Context-based control of FW enforcement (applied to objects) | No | Yes | Yes | No | Yes | Yes | Yes | Yes |
| Application and Protocol Identification (Context-Aware Micro-Segmentation) | No | No | Yes | No | No | No | Yes | No |
| Identity Firewall Rules for RDSH (Context-Aware Micro-Segmentation) | No | No | Yes | No | No | No | Yes | No |
| Edge Firewall | ||||||||
| Edge Firewall | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Edge High-Availability | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Service Composer | ||||||||
| Security Policy | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Security Tags | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| vCenter Object based security groups | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| IPSet, MACset based security groups | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Data Security | ||||||||
| Scan Guest VMs for Sensitive Data | No | Yes | Yes | n/a | n/a | n/a | n/a | n/a |
| Third Party Integration | ||||||||
| Endpoint Service Insertion - Guest Introspection | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Network Service Insertion | No | Yes | Yes | No | No | Yes | Yes | Yes |
| Public API based Integration | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Load-Balancing | ||||||||
| Edge Load-Balancing | ||||||||
| Protocols | ||||||||
| TCP (L4 - L7) | No | Yes | Yes | No | No | Yes | Yes | Yes |
| UDP | No | Yes | Yes | No | No | Yes | Yes | Yes |
| FTP | No | Yes | Yes | No | No | Yes | Yes | Yes |
| HTTP | No | Yes | Yes | No | No | Yes | Yes | Yes |
| HTTPS (Pass-through) | No | Yes | Yes | No | No | Yes | Yes | Yes |
| HTTPS (SSL Termination) | No | Yes | Yes | No | No | Yes | Yes | Yes |
| LB Methods | No | Yes | Yes | No | No | Yes | Yes | Yes |
| Round Robin | No | Yes | Yes | No | No | Yes | Yes | Yes |
| Src IP Hash | No | Yes | Yes | No | No | Yes | Yes | Yes |
| Least Connection | No | Yes | Yes | No | No | Yes | Yes | Yes |
| URI, URL, HTTP (L7 engine) | No | Yes | Yes | No | No | Yes | Yes | Yes |
| vCenter Context-aware LB | No | Yes | Yes | No | No | Yes | Yes | Yes |
| L7 Application Rules | No | Yes | Yes | No | No | Yes | Yes | Yes |
| Health Checks | ||||||||
| TCP | No | Yes | Yes | No | No | Yes | Yes | Yes |
| ICMP | No | Yes | Yes | No | No | Yes | Yes | Yes |
| UDP | No | Yes | Yes | No | No | Yes | Yes | Yes |
| HTTP | No | Yes | Yes | No | No | Yes | Yes | Yes |
| HTTPS | No | Yes | Yes | No | No | Yes | Yes | Yes |
| Connection Throttling | No | Yes | Yes | No | No | Yes | Yes | Yes |
| High-Availability | No | Yes | Yes | No | No | Yes | Yes | Yes |
| Monitoring | ||||||||
| View VIP/Pool/Server Objects | No | Yes | Yes | No | No | Yes | Yes | Yes |
| View VIP/Pool/Server Stats | No | Yes | Yes | No | No | Yes | Yes | Yes |
| Global Stats VIP Sessions | No | Yes | Yes | No | No | Yes | Yes | Yes |
| Operations | ||||||||
| Tools | ||||||||
| Tunnel Health Monitoring | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| TraceFlow | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Port-Connections Tool | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Server Activity Monitoring | No | Yes | Yes | n/a | n/a | n/a | n/a | n/a |
| Flow Monitoring | No | Yes | Yes | No | Yes | Yes | Yes | Yes |
| IPFix (VDS Feature) | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Endpoint Monitoring | No | No | Yes | No | No | No | Yes | No |
| Application Rule Manager | No | Yes | Yes | No | No | Yes | Yes | Yes |
| VMware Tools | ||||||||
| vR Operations Manager | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| vR Log Insight | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Cloud Management Platform | ||||||||
| vRealize Automation | ||||||||
| Logical Switch Creation | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| Distributed router creation | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| Distributed firewall security consumption | No | Yes | Yes | No | Yes | Yes | Yes | Yes |
| Load-balancing consumption | No | Yes | Yes | No | No | Yes | Yes | Yes |
| App Isolation | No | Yes | Yes | No | Yes | Yes | Yes | Yes |
| VMware Integrated OpenStack (Neutron Plugin) | ||||||||
| VLAN Provider Networks | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| Overlay Provider Networks | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| Overlay Tenant Networks | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| Metadata Proxy Service | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| DHCP Server | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| Neutron Router - Centralized - Shared | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| Neutron Router - Centralized - Exclusive | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| Neutron Router - Distributed | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| Static Routes on Neutron Router | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| Floating IP Support | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| No-NAT Neutron Routers | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| Neutron Security Groups using Stateful Firewall | No | Yes | Yes | No | Yes | Yes | Yes | No |
| Port Security | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| Neutron L2 Gateway | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| Load Balancing (LBaaS) | No | Yes | Yes | No | Yes | Yes | Yes | No |
| Admin Utility (Consistency Check, Cleanup) | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No |
| Cross VC Logical Networking and Security | No | No | No | No | No | No | No | No |
| vRealize Network Insight | ||||||||
| Traffic (IPFIX) Visibility and Network Monitoring | No | No | No | No | No | No | Yes | No |
| Firewall Planning & Management | No | No | No | No | No | No | Yes | No |
| NSX Operations and Troubleshooting | No | No | No | No | No | No | Yes | No |
| VMware HCX | ||||||||
| Large Scale Workload Migration | No | No | No | No | No | No | Yes | No |
| WAN Optimization for Workload Migration | No | No | No | No | No | No | Yes | No |
| Traffic and Load Management Across Multiple Links | No | No | No | No | No | No | Yes | No |
* For more information on specific version support and other details, see the VMware Product Interoperability Matrices.
** Distributed Firewall with L7 added in NSX for vSphere 6.4.x.
** Distributed Firewall with L7 added in NSX for vSphere 6.4.x.
NSX for vShield Endpoint
vShield Endpoint is a feature which allows you to offload antivirus and anti-malware agent processing to a dedicated secure virtual appliance. With the release of NSX 6.2.4, the default license is NSX for vShield Endpoint, allowing you to manage your vShield Endpoint environment with NSX. Customers who purchased vSphere with vShield Endpoint (Essential Plus and later) will be able to download NSX. This means that NSX will appear on the vSphere download site like vCNS. To ensure customers do not use any other unlicensed NSX features (eg. VXLAN, DFW, Edge services), the license key will have hard enforcement to prevent NSX host preparation and block Edge creation.
Log Insight for NSX
VMware vRealize Log Insight for NSX provides intelligent log analytics for NSX. Log Insight provides monitoring and troubleshooting capabilities and customizable dashboards for network virtualization, flow analysis, and alerts. The 3.3.2 version of Log Insight accepts NSX Standard/Advanced/Enterprise edition license keys issued for NSX 6.2.2 and later. The 4.6.1 version of Log Insight introduces support for NSX Data Center editions (Standard, Professional, Advanced, Enterprise Plus, Remote Office Branch Office).
Additional Information
Feedback
Yes
No
Powered by
