Launching soon: The world's first vendor agnostic bug scrubLearn more & join waitlist
OPERATIONAL DEFECT DATABASE
...
...
This article provides information on licensing editions of VMware NSX-T and list of features associated with the various licensing editions in VMware NSX-T Data Center 3.1.x.New VMware NSX Data Center editions became available to order on June 5th, 2018. The tiers of NSX Data Center licenses are as follows:NSX Data Center Editions NSX Data Center Standard Edition: For organizations needing agility and automation of the network.NSX Data Center Professional Edition: For organizations needing Standard, plus micro-segmentation, and may have public cloud endpoints.NSX Data Center Advanced Edition: For organizations needing Professional, plus advanced networking and security services, and may have multiple sites.NSX Data Center Enterprise Plus Edition: For organizations needing the most advanced capabilities NSX Data Center has to offer, plus network visibility and security operations with vRealize Network Insight™, and hybrid cloud mobility with VMware HCX.NSX Data Center for Remote Office Branch Office: For organizations that need to virtualize networking and security for applications in the remote office or branch office. NSX Editions (Sold May 2016 - June 2018) (no longer available for purchase)⁹ NSX Standard Edition - For organizations needing agility and automation of the network.NSX Advanced Edition - For organizations needing Standard, plus a fundamentally more secure data center with micro-segmentation.NSX Enterprise Edition - For organizations needing Advanced, plus networking and security across multiple domains.
The following table outlines specific functions available by edition. NSX Data Center is available as a single download image with license keys required to enable specific functionality. NSX Editions (Sold May 2016 - June 2018)NSX Data Center Editions Feature StandardAdvancedEnterprise Standard Professional Advanced Enterprise Plus Remote Office / Branch Office Platform Features vSphere Distributed Switch YesYesYesYesYesESXi Support1YesYesYesYesYesYesYesYesKVM Support2NoNoNoYesYesYesYesNoController ClusteringYesYesYesYesYesYesYesYesvCenter Integration1YesYesYesYesYesYesYesYesMulti-vCenter® Networking and SecurityNoNoYesNoNoYesYesNoFederationNoNoNoNoNoNoYesNoEdge Platform FeaturesStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeEdge in VM Form FactorYesYesYesYesYesYesYesYesEdge in Bare-Metal Form FactorYesYesYesYesYesYesYesNoDPDK Optimized ForwardingYesYesYesYesYesYesYesYesSwitchingStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficevSphere Distributed Switch¹⁰YesYesYesYesYesYesYesYesDistributed SwitchingYesYesYesYesYesYesYesNoVLAN Backed Logical SwitchingYesYesYesYesYesYesYesYesOverlay Backed Logical SwitchingYesYesYesYesYesYesYesNoMultiple TEP SupportYesYesYesYesYesYesYesNoOptimized ARP Learning and Broadcast SuppressionYesYesYesYesYesYesYesNoGENEVE EncapsulationYesYesYesYesYesYesYesNoUnicast ReplicationYesYesYesYesYesYesYesNoHeadend ReplicationYesYesYesYesYesYesYesNoSpoofguardYesYesYesYesYesYesYesNoLACP (Edge and Host)YesYesYesYesYesYesYesYesL2 MulticastYesYesYesYesYesYesYesNoL3 MulticastNoYesYesNoNoYesYesNoQuality of Service (QoS)StandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeQoS MarkingYesYesYesYesYesYesYesNoQoS DSCP Trust BoundaryYesYesYesYesYesYesYesNoL2 Bridging to Physical EnvironmentStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeSoftware Based L2 Bridge to Physical EnvironmentsYesYesYesYesYesYesYesNoRoutingStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeDistributed RoutingYesYesYesYesYesYesYesNoMulti-Tier RoutingYesYesYesYesYesYesYesNoDynamic Routing with ECMPYesYesYesYesYesYesYesNoVirtual Routing and Forwarding (Tier-0 Gateway VRFs)NoYesYesNoNoYesYesNoE-VPNNoNoYesNoNoNoYesNoStatic Routing - IPv4StandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeStatic RoutingYesYesYesYesYesYesYesYesBFDYesYesYesYesYesYesYesYesNull RoutesYesYesYesYesYesYesYesYesDevice RoutesYesYesYesYesYesYesYesYesStatic Routing - IPv6StandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeStatic RoutingYesYesYesYesYesYesYesNoNull RoutesYesYesYesYesYesYesYesNoDevice RoutesYesYesYesYesYesYesYesNoBGP - IPv4 UnicastStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeeBGPYesYesYesYesYesYesYesNoeBGP MultihopYesYesYesYesYesYesYesNoiBGPYesYesYesYesYesYesYesNoGraceful RestartYesYesYesYesYesYesYesNoBFDYesYesYesYesYesYesYesNo4-byte ASNYesYesYesYesYesYesYesNoBGP - IPv6 UnicastStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeeBGPNoYesYesNoNoYesYesNoeBGP MultihopNoYesYesNoNoYesYesNoiBGPNoYesYesNoNoYesYesNoGraceful RestartNoYesYesNoNoYesYesNo4-byte ASNNoYesYesNoNoYesYesNoBFD - IPv4StandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeSub-Second Keepalive TimerYesYesYesYesYesYesYesNoRoute MapsStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeMatch on Prefix-List and Community-ListYesYesYesYesYesYesYesNoSet Weight, MED, AS Path, Prepending, Local Preference, and CommunityYesYesYesYesYesYesYesNoOtherStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeHigh Availability Virtual IP (HA VIP)YesYesYesYesYesYesYesNoRoute RedistributionYesYesYesYesYesYesYesNoIP Prefix-ListsYesYesYesYesYesYesYesNoActive / Active RedundancyYesYesYesYesYesYesYesNoActive / Standby RedundancyYesYesYesYesYesYesYes No Per Interface RPF CheckYesYesYesYesYesYesYesNoNATStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeNAT on North/South and East/West Logical RoutersYesYesYesYesYesYesYesYesSource NATYesYesYesYesYesYesYesYesDestination NATYesYesYesYesYesYesYesYesNAT N:NYesYesYesYesYesYesYesYesStateless NATYesYesYesYesYesYesYesYesNAT LoggingYesYesYesYesYesYesYesYesNAT64NoYesYesNoNoYesYesNoFirewallStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeEdge FirewallYesYesYesYesYesYesYesYesDistributed FirewallingNoYesYesNoYesYesYesYesCommon Firewall User InterfaceYesYesYesYesYesYesYesYesFirewall SectionsYesYesYesYesYesYesYesYesFirewall LoggingYesYesYesYesYesYesYesYesStateful L2 and L3 RulesYesYesYesYesYesYesYesYesStateless L2 and L3 RulesYesYesYesYesYesYesYesYesTag Based RulesYesYesYesYesYesYesYesYesDistributed Firewall based IPFIXNoYesYesNoYesYesYesYesDistributed FQDN WhitelistingNoNoYesNoNoYesYesNoL7 Application Identification RulesYesYesYesYesYesYesYesYesAgent-Based enforcement for Physical ServersYesYesYesYesYesYesYesYesIdentity FirewallStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeIdentity based Groups using Active DirectoryNoYesYesNoNoYesYesNoNSX Distributed Threat Prevention7StandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeDistributed IDSNoYesYesNoNoYesYesNoDistributed IPSNoYesYesNoNoYesYesNoPolicy, Tagging and GroupingStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeObject Tagging / Security TagsYesYesYesYesYesYesYesYesNetwork Centric GroupingYesYesYesYesYesYesYesYesWorkload Centric GroupingYesYesYesYesYesYesYesYesIP Based GroupsYesYesYesYesYesYesYesYesMAC Based GroupsYesYesYesYesYesYesYesYesIntent based Networking and Security PolicyYesYesYesYesYesYesYesYesDNS, DHCP and IPAM (DDI)StandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeIPAMYesYesYesYesYesYesYesYesIP BlocksYesYesYesYesYesYesYesYesIP SubnetsYesYesYesYesYesYesYesYesIP PoolsYesYesYesYesYesYesYesYesIPv4 DHCP ServerYesYesYesYesYesYesYesYesIPv6 DHCP ServerNoYesYesNoNoYesYesNoIPv4 DHCP RelayYesYesYesYesYesYesYesYesIPv6 DHCP RelayNoYesYesNoNoYesYesNoIPv4 DHCP Static Bindings / Fixed AddressesYesYesYesYesYesYesYesYesIPv6 DHCP Static Bindings / Fixed AddressesNoYesYesNoNoYesYesNoIPv4 DNS Relay / DNS ProxyYesYesYesYesYesYesYesYesIPv4 Meta-Data ProxyYesYesYesYesYesYesYesNoLoad Balancing8StandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeProtocols TCP (L4-L7)NoYesYesNoNoYesYesYesUDPNoYesYesNoNoYesYesYesHTTPNoYesYesNoNoYesYesYesLoad Balancing Methods Round RobinNoYesYesNoNoYesYesYesSource IP HashNoYesYesNoNoYesYesYesLeast ConnectionsNoYesYesNoNoYesYesYesL7 Application Rules with RegEx SupportNoYesYesNoNoYesYesYesVPNStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeL2 VPNNoYesYesNoYesYesYesYesL3 VPNNoYesYesNoYesYesYesYesHealth Checks TCPNoYesYesNoNoYesYesYesICMPNoYesYesNoNoYesYesYesUDPNoYesYesNoNoYesYesYesHTTPNoYesYesNoNoYesYesYesHTTPSNoYesYesNoNoYesYesYesMonitoring View VIP / Pool / Server ObjectsNoYesYesNoNoYesYesYesView VIP / Pool / Server StatisticsNoYesYesNoNoYesYesYesView Global Statistics VIP SessionsNoYesYesNoNoYesYesYesLoad Balancing Automation Pool Members Based on vCenter Context or IP AddressesNoYesYesNoNoYesYesYesOther Connection ThrottlingNoYesYesNoNoYesYesYesHigh-AvailabilityNoYesYesNoNoYesYesYesAPI Driven AutomationStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeREST APIYesYesYesYesYesYesYesYesHierarchical Policy APIYesYesYesYesYesYesYesYesJSON SupportYesYesYesYesYesYesYesYesOpenAPI / Swagger SpecYesYesYesYesYesYesYesYesJava SDKYesYesYesYesYesYesYesYesPython SDKYesYesYesYesYesYesYesYesAuto-generated API DocumentationYesYesYesYesYesYesYesYesTerraform Provider6YesYesYesYesYesYesYesYesAnsible Modules6YesYesYesYesYesYesYesYesCloud Native and Integration with Cloud Management PlatformsStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeContainer Networking and SecurityNoYesYesNoNoYesYesNoIntegration with vRealize Automation1,6YesYesYesYesYesYesYesNoIntegration with vCloud Director1,6YesYesYesYesYesYesYesNoIntegration with VMware Integrated OpenStack1,6YesYesYesYesYesYesYesNoIntegration with other OpenStack Platform3, 6YesYesYesYesYesYesYesNoService Insertion IntegrationsStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeEndpoint ProtectionYesYesYesYesYesYesYesYesNetwork IntrospectionNoYesYesNoNoYesYesYesNSX IntelligenceStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeLayer 4 VM-to-VM Traffic Flow AnalysisNoNoNoNoNoNoYesNoLayer 4 Firewall VisibilityNoNoNoNoNoNoYesNoLayer 4 Automated Security PolicyNoNoNoNoNoNoYesNoLayer 4 Rule and Group Recommendation AnalyticsNoNoNoNoNoNoYesNoIntegration with NSX Cloud for AWS and Azure SupportStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeNSX on-prem license portability for Public Cloud workloadsNoYesYesNoNoYesYesYesNSX Enforced Mode (Agent-Based Cloud Security)NoYesYesNoYesYesYesYesCloud Enforced Mode (Agentless Based Cloud Security)NoYesYesNoYesYesYesYesL7 Security Features (AppID, URL Filtering)NoYesYesNoYesYesYesYesService InsertionNoYesYesNoYesYesYesYesNSX Security for VDI workloads on Azure HorizonNoYesYesNoYesYesYesYesVPN (on-prem to public cloud; public cloud - public cloud; intra public cloud)NoYesYesNoYesYesYesYesSupport for AWS Gov Cloud and Azure Government Cloud workloadsNoYesYesNoYesYesYesYesAuthentication and AuthorizationStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeAuthentication using Workspace ONE Access1, 5YesYesYesYesYesYesYesYesDirect Active Directory Integration via LDAPYesYesYesYesYesYesYesYesAuthentication via OpenLDAPYesYesYesYesYesYesYesYesSession Based AuthenticationYesYesYesYesYesYesYesYesCertificate Based Authentication (Principle Identity)YesYesYesYesYesYesYesYesRole Based Access ControlYesYesYesYesYesYesYesYesLog ManagementStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficevRealize Log Insight Integration1, 4YesYesYesYesYesYesYesYesSplunk Integration2YesYesYesYesYesYesYesYesInstallationStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeAutomated Controller DeploymentYesYesYesYesYesYesYesYesManual Controller DeploymentYesYesYesYesYesYesYesYesAutomated Edge DeploymentYesYesYesYesYesYesYesYesManual Edge DeploymentYesYesYesYesYesYesYesYesAutomated Host Preparation by ClusterYesYesYesYesYesYesYesYesOperationsStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficePort MirroringYesYesYesYesYesYesYesYesTraceflowYesYesYesYesYesYesYesYesTunnel Health MonitoringYesYesYesYesYesYesYesNoPort Connectivity ToolYesYesYesYesYesYesYesYesSwitch Based IPFIXYesYesYesYesYesYesYesYesLLDPYesYesYesYesYesYesYesYesAutomated Technical Support BundlesYesYesYesYesYesYesYesYesPacket CaptureYesYesYesYesYesYesYesYesBackup and RestoreYesYesYesYesYesYesYesYesSNMP v1/v2/v3 with TrapsYesYesYesYesYesYesYesYesUpgrades and MigrationsStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeUpgrade CoordinatorYesYesYesYesYesYesYesYesNSX for vSphere to NSX-T Migration CoordinatorYesYesYesYesYesYesYesYes Notes: 1 Please refer to the VMware Product Interoperability Matrices for specific versions supported with NSX-T Data Center.2 Please refer to the NSX-T Data Center release notes for specific versions.3 Please refer to the NSX-T Data Center partner website for specific versions.4 VMware vRealize Log Insight for NSX provides intelligent log analytics for NSX Data Center. Log Insight provides monitoring and troubleshooting capabilities and customizable dashboards for network virtualization, flow analysis, and alerts. VMware vRealize Log Insight version 3.3.2 and later accepts NSX Data Center Standard/ProfessionalAdvanced/Enterprise Plus edition license keys issued for NSX-T 1.0.0 and later. This means you will have an enterprise-level Log Insight license for every license of NSX Data Center.5 VMware Workspace ONE Access - A license to use VMware NSX Data Center includes an entitlement to use the VMware Workspace ONE Access feature, but only for the following functionalities: Directory integration functionality of VMware Workspace ONE Access to authenticate users in a user directory such as Microsoft Active Directory or LDAP.Conditional access policy.Single-sign-on integration functionality with third party Identity providers to allow third party identity providers’ users to single-sign-on into NSX Data Center.Two-factor authentication solution through integration with third party systems. VMware Verify, VMware’s multi-factor authentication solution, received as part of VMware Workspace ONE Access may not be used as part of NSX Data Center.Single-sign-on functionality to access VMware products that support single-sign-on capabilities. 6 Integration with automation tools such as vRealize Automation, vCloud Director, VMware Integrated OpenStack, and other OpenStack distributions, Ansible, and Terraform is available for all editions of NSX, however, you must have the appropriate NSX edition for the feature which is automated by these tools. For example automation of load balancing from Terraform or OpenStack requires NSX Data Center Advanced, Enterprise Plus, or ROBO.7 NSX Distributed Threat Prevention requires an additional subscription-based purchase.8 Both IPv4 and IPv6 are supported for all Load Balancing features except for IPv6-VIP-to-IPv4-member and IPv4-VIP-to-IPv6-member translations.9 Customers who have purchased the legacy NSX editions can apply their licenses to NSX-T Data Center.10 Requires VDS 7.0 or higher11 Migration Coordinator will migrate the deployment in NSX for vSphere and the features used in NSX-T. It is the responsibility of the customer to ensure the version of NSX-T allows the use of those features. 12 Network Detection and Response supports event and artifact submission from Distributed Firewall only. It is a hosted service running from various VMware Regions. 13 A single sensor socket entitles up to 250 artifact submissions per day with a maximum artifact size of 64MB. 14 Subject to Gateway Firewall features available in that specific SKU
For Product offerings for VMware NSX-T Data Center 4.0.x, refer to https://kb.vmware.com/s/article/89137For Product offerings for VMware NSX-T Data Center 3.2.x, refer to https://kb.vmware.com/s/article/86095For NSX editions no longer available for purchase, refer to https://kb.vmware.com/s/article/88846