NAPT
All scripts
cloud
Expert
4–12 min

NSX-T Micro-Segmentation Pusher

NSX-T REST API: distributed firewall rule lifecycle, security group management, policy drift vs baseline, rule shadow analysis, traffic flow simulation and HTML report.

VMware NSX-T
Open in GeneratorOpen in Platform
You're viewing a preview

The full script, parameters, and execution console are available with a free account.

Sign in free to access

Already have access? Sign in →

Capabilities

  • NSX-T Policy API
  • DFW rule lifecycle
  • Security group management
  • Policy drift vs baseline
  • Rule shadow analysis
  • Flow simulation
  • HTML report

Required inputs

Parameters the script accepts. Defaults shown; some are vendor- or context-gated.

ParameterTypeDefaultNotes
Baseline YAML
baseline
stringdfw_baseline.yaml—
DFW section
section
stringApp-Tier—
Sim source IP
simulate_src
string10.10.1.5—

Hint 1 — Name your vendors and OS versions

Mention the exact platforms you run (VMware NSX-T) so the generated cloud logic uses the right CLI/NETCONF syntax.

Hint 2 — State your real thresholds

Provide concrete values for Baseline YAML, DFW section, Sim source IP instead of the defaults — they shape what counts as a fault.

Hint 3 — Prioritize the checks you need

This tool can nSX-T Policy API and dFW rule lifecycle. Ask for the subset relevant to your incident to keep output focused.

Hint 4 — Describe your inventory format

Tell the assistant whether your device list is CSV, YAML, or JSON and which columns it has, so parsing matches your data.

Sample inventory schema

Authoritative shape of the device/policy data this script consumes.

No bundled inventory sample. The script accepts standard device lists (CSV/YAML) with hostname, mgmt IP, vendor, and credentials.

Expected output

Reference terminal output the script should produce — used as a stylistic and structural target.

terminal
[2026-06-12] INFO  NSX-T Policy API: pulling DFW section 'App-Tier'...
  42 rules · comparing vs dfw_baseline.yaml
RULE              ISSUE                         STATUS
allow-web-app     matches baseline              OK
any-any-allow     shadows 6 downstream rules    SHADOW ←
Summary: 41 ok · 1 shadow · sim 10.10.1.5→app: ALLOWED by 'allow-web-app'