...
This article provides information on editions of VMware NSX that are no longer offered for sale.NSX for vSphere without Editions (Sold September 2013 - May 2016) The original NSX for vSphere product did not have editions and was referred to as NSX for vSphere.License keys are named with the NSX for vSphere nomenclature.Customers who purchased this offering from VMware are entitled to NSX Enterprise. NSX Multi-Hypervisor The original NSX for Multi-Hypervisor product did not have editions.Customers who purchased this offering from VMware are entitled to NSX Enterprise. NSX Editions (Sold May 2016 - June 2018) NSX Standard - For organizations needing agility and automation of the network.NSX Advanced - For organizations needing Standard, plus a fundamentally more secure data center with micro-segmentation.NSX Enterprise - For organizations needing Advanced, plus networking and security across multiple domains. NSX Data Center Editions (Sold until October 29th, 2021) NSX Data Center Standard - For organizations needing agility and automation of the network.NSX Data Center Professional -For organizations needing Standard, plus micro-segmentation, and may have public cloud endpoints.NSX Data Center Advanced - For organizations needing Professional, plus advanced networking and security services, and may have multiple sites.NSX Data Center Enterprise Plus - For organizations needing the most advanced capabilities NSX Data Center has to offer, plus network visibility and security operations with vRealize Network Insight™, and hybrid cloud mobility with VMware HCX.NSX Data Center for Remote Office Branch Office - For organizations that need to virtualize networking and security for applications in the remote office or branch office.
The following table outlines specific functions available by edition. NSX Data Center is available as a single download image with license keys required to enable specific functionality. NSX for vSphere (Sold September 2013 - May 2016)NSX Editions (Sold May 2016 - June 2018)NSX Data Center Editions (Sold until October 29th, 2021) Feature NSX for vSphereStandardAdvancedEnterprise Standard Professional Advanced Enterprise Plus Remote Office / Branch Office Platform Features vSphere Distributed SwitchYesYesYesYesYesYesYesYesYesESXi Support1YesYesYesYesYesYesYesYesYesKVM Support2NoNoNoNoYesYesYesYesNoController ClusteringYesYesYesYesYesYesYesYesYesvCenter Integration1YesYesYesYesYesYesYesYesYesMulti-vCenter® Networking and SecurityYesNoNoYesNoNoYesYesNoFederationNoNoNoNoNoNoNoYesNoDual Stack (IPv4/IPv6) External ManagementNoNoYesYesNoNoYesYesNoEdge Platform FeaturesNSX for vSphereStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeEdge in VM Form FactorYesYesYesYesYesYesYesYesYesEdge in Bare-Metal Form FactorYesYesYesYesYesYesYesYesNoDPDK Optimized ForwardingYesYesYesYesYesYesYesYesYesSwitchingNSX for vSphereStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficevSphere Distributed Switch9YesYesYesYesYesYesYesYesYesDistributed SwitchingYesYesYesYesYesYesYesYesNoVLAN Backed Logical SwitchingYesYesYesYesYesYesYesYesYesOverlay Backed Logical SwitchingYesYesYesYesYesYesYesYesNoMultiple TEP SupportYesYesYesYesYesYesYesYesNoOptimized ARP Learning and Broadcast SuppressionYesYesYesYesYesYesYesYesNoGENEVE EncapsulationYesYesYesYesYesYesYesYesNoUnicast ReplicationYesYesYesYesYesYesYesYesNoHeadend ReplicationYesYesYesYesYesYesYesYesNoSpoofguardYesYesYesYesYesYesYesYesNoLACP (Edge and Host)YesYesYesYesYesYesYesYesYesL2 MulticastYesYesYesYesYesYesYesYesNoL3 MulticastYesNoYesYesNoNoYesYesNoQuality of Service (QoS)NSX for vSphereStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeQoS MarkingYesYesYesYesYesYesYesYesNoQoS DSCP Trust BoundaryYesYesYesYesYesYesYesYesNoL2 Bridging to Physical EnvironmentNSX for vSphereStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeSoftware Based L2 Bridge to Physical EnvironmentsYesYesYesYesYesYesYesYesNoRoutingNSX for vSphereStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeDistributed RoutingYesYesYesYesYesYesYesYesNoMulti-Tier RoutingYesYesYesYesYesYesYesYesNoDynamic Routing with ECMPYesYesYesYesYesYesYesYesNoVirtual Routing and Forwarding (Tier-0 Gateway VRFs)YesNoYesYesNoNoYesYesNoE-VPNYesNoNoYesNoNoNoYesNoOSPF v2YesYesYesYesYesYesYesYesNoStatic Routing - IPv4NSX for vSphereStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeStatic RoutingYesYesYesYesYesYesYesYesYesBFDYesYesYesYesYesYesYesYesYesNull RoutesYesYesYesYesYesYesYesYesYesDevice RoutesYesYesYesYesYesYesYesYesYesStatic Routing - IPv6NSX for vSphereStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeStatic RoutingYesYesYesYesYesYesYesYesNoNull RoutesYesYesYesYesYesYesYesYesNoDevice RoutesYesYesYesYesYesYesYesYesNoBGP - IPv4 UnicastNSX for vSphereStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeeBGPYesYesYesYesYesYesYesYesNoeBGP MultihopYesYesYesYesYesYesYesYesNoiBGPYesYesYesYesYesYesYesYesNoGraceful RestartYesYesYesYesYesYesYesYesNoBFDYesYesYesYesYesYesYesYesNo4-byte ASNYesYesYesYesYesYesYesYesNoBGP - IPv6 UnicastNSX for vSphereStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeeBGPYesNoYesYesNoNoYesYesNoeBGP MultihopYesNoYesYesNoNoYesYesNoiBGPYesNoYesYesNoNoYesYesNoGraceful RestartYesNoYesYesNoNoYesYesNo4-byte ASNYesNoYesYesNoNoYesYesNoBFD - IPv4NSX for vSphereStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeSub-Second Keepalive TimerYesYesYesYesYesYesYesYesNoRoute MapsNSX for vSphereStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeMatch on Prefix-List and Community-ListYesYesYesYesYesYesYesYesNoSet Weight, MED, AS Path, Prepending, Local Preference, and CommunityYesYesYesYesYesYesYesYesNoOtherNSX for vSphereStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeHigh Availability Virtual IP (HA VIP)YesYesYesYesYesYesYesYesNoRoute RedistributionYesYesYesYesYesYesYesYesNoIP Prefix-ListsYesYesYesYesYesYesYesYesNoActive / Active RedundancyYesYesYesYesYesYesYesYesNoActive / Standby RedundancyYesYesYesYesYesYesYesYes No Per Interface RPF CheckYesYesYesYesYesYesYesYesNoNATNSX for vSphereStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeNAT on North/South and East/West Logical RoutersYesYesYesYesYesYesYesYesYesSource NATYesYesYesYesYesYesYesYesYesDestination NATYesYesYesYesYesYesYesYesYesNAT N:NYesYesYesYesYesYesYesYesYesStateless NATYesYesYesYesYesYesYesYesYesNAT LoggingYesYesYesYesYesYesYesYesYesNAT64YesNoYesYesNoNoYesYesNoFirewallNSX for vSphereStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeEdge FirewallYesYesYesYesYesYesYesYesYesDistributed FirewallingYesNoYesYesNoYesYesYesYesCommon Firewall User InterfaceYesYesYesYesYesYesYesYesYesFirewall SectionsYesYesYesYesYesYesYesYesYesFirewall LoggingYesYesYesYesYesYesYesYesYesStateful L2 and L3 RulesYesYesYesYesYesYesYesYesYesStateless L2 and L3 RulesYesYesYesYesYesYesYesYesYesTag Based RulesYesYesYesYesYesYesYesYesYesDistributed Firewall based IPFIXYesNoYesYesNoYesYesYesYesDistributed FQDN WhitelistingYesNoNoYesNoNoYesYesNoL7 Application Identification RulesYesYesYesYesYesYesYesYesYesAgent-Based enforcement for Physical ServersYesYesYesYesYesYesYesYesYesIdentity FirewallNSX for vSphereStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeIdentity based Groups using Active DirectoryYesNoYesYesNoNoYesYesNoNSX Distributed Threat Prevention7NSX for vSphereStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeDistributed IDSYesNoYesYesNoNoYesYesNoDistributed IPSYesNoYesYesNoNoYesYesNoPolicy, Tagging and GroupingNSX for vSphereStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeObject Tagging / Security TagsYesYesYesYesYesYesYesYesYesNetwork Centric GroupingYesYesYesYesYesYesYesYesYesWorkload Centric GroupingYesYesYesYesYesYesYesYesYesIP Based GroupsYesYesYesYesYesYesYesYesYesMAC Based GroupsYesYesYesYesYesYesYesYesYesIntent based Networking and Security PolicyYesYesYesYesYesYesYesYesYesDNS, DHCP and IPAM (DDI)NSX for vSphereStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeIPAMYesYesYesYesYesYesYesYesYesIP BlocksYesYesYesYesYesYesYesYesYesIP SubnetsYesYesYesYesYesYesYesYesYesIP PoolsYesYesYesYesYesYesYesYesYesIPv4 DHCP ServerYesYesYesYesYesYesYesYesYesIPv6 DHCP ServerYesNoYesYesNoNoYesYesNoIPv4 DHCP RelayYesYesYesYesYesYesYesYesYesIPv6 DHCP RelayYesNoYesYesNoNoYesYesNoIPv4 DHCP Static Bindings / Fixed AddressesYesYesYesYesYesYesYesYesYesIPv6 DHCP Static Bindings / Fixed AddressesYesNoYesYesNoNoYesYesNoIPv4 DNS Relay / DNS ProxyYesYesYesYesYesYesYesYesYesIPv4 Meta-Data ProxyYesYesYesYesYesYesYesYesNoLoad Balancing8NSX for vSphereStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeProtocols TCP (L4-L7)YesNoYesYesNoNoYesYesYesUDPYesNoYesYesNoNoYesYesYesHTTPYesNoYesYesNoNoYesYesYesLoad Balancing Methods Round RobinYesNoYesYesNoNoYesYesYesSource IP HashYesNoYesYesNoNoYesYesYesLeast ConnectionsYesNoYesYesNoNoYesYesYesL7 Application Rules with RegEx SupportYesNoYesYesNoNoYesYesYesVPNEnterpriseStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeL2 VPNYesNoYesYesNoYesYesYesYesL3 VPNYesNoYesYesNoYesYesYesYesHealth Checks TCPYesNoYesYesNoNoYesYesYesICMPYesNoYesYesNoNoYesYesYesUDPYesNoYesYesNoNoYesYesYesHTTPYesNoYesYesNoNoYesYesYesHTTPSYesNoYesYesNoNoYesYesYesMonitoring View VIP / Pool / Server ObjectsYesNoYesYesNoNoYesYesYesView VIP / Pool / Server StatisticsYesNoYesYesNoNoYesYesYesView Global Statistics VIP SessionsYesNoYesYesNoNoYesYesYesLoad Balancing Automation Pool Members Based on vCenter Context or IP AddressesYesNoYesYesNoNoYesYesYesOther Connection ThrottlingYesNoYesYesNoNoYesYesYesHigh-AvailabilityYesNoYesYesNoNoYesYesYesAPI Driven AutomationNSX for vSphereStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeREST APIYesYesYesYesYesYesYesYesYesHierarchical Policy APIYesYesYesYesYesYesYesYesYesJSON SupportYesYesYesYesYesYesYesYesYesOpenAPI / Swagger SpecYesYesYesYesYesYesYesYesYesJava SDKYesYesYesYesYesYesYesYesYesPython SDKYesYesYesYesYesYesYesYesYesAuto-generated API DocumentationYesYesYesYesYesYesYesYesYesTerraform Provider6YesYesYesYesYesYesYesYesYesAnsible Modules6YesYesYesYesYesYesYesYesYesCloud Native and Integration with Cloud Management PlatformsNSX for vSphereStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeContainer Networking and SecurityYesNoYesYesNoNoYesYesNoVMware Container Networking with Project Antrea EnterpriseYesNoYesYesNoNoYesYesNoIntegration with vRealize Automation1,6YesYesYesYesYesYesYesYesNoIntegration with vCloud Director1,6YesYesYesYesYesYesYesYesNoIntegration with VMware Integrated OpenStack1,6YesYesYesYesYesYesYesYesNoIntegration with other OpenStack Platform3,6YesYesYesYesYesYesYesYesNoService Insertion IntegrationsNSX for vSphereStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeEndpoint ProtectionYesYesYesYesYesYesYesYesYesNetwork IntrospectionYesNoYesYesNoNoYesYesYesNSX IntelligenceNSX for vSphereStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeLayer 4 VM-to-VM Traffic Flow AnalysisNoNoNoNoNoNoNoYesNoLayer 4 Firewall VisibilityNoNoNoNoNoNoNoYesNoLayer 4 Automated Security PolicyNoNoNoNoNoNoNoYesNoLayer 4 Rule and Group Recommendation AnalyticsNoNoNoNoNoNoNoYesNoIntegration with NSX Cloud for AWS and Azure SupportNSX for vSphereStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeNSX on-prem license portability for Public Cloud workloadsYesNoYesYesNoNoYesYesYesNSX Enforced Mode (Agent-Based Cloud Security)YesNoYesYesNoYesYesYesYesCloud Enforced Mode (Agentless Based Cloud Security)YesNoYesYesNoYesYesYesYesL7 Security Features (AppID, URL Filtering)YesNoYesYesNoYesYesYesYesService InsertionYesNoYesYesNoYesYesYesYesNSX Security for VDI workloads on Azure HorizonYesNoYesYesNoYesYesYesYesVPN (on-prem to public cloud; public cloud - public cloud; intra public cloud)YesNoYesYesNoYesYesYesYesSupport for AWS Gov Cloud and Azure Government Cloud workloadsYesNoYesYesNoYesYesYesYesAuthentication and AuthorizationNSX for vSphereStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeAuthentication using Workspace ONE Access1,5YesYesYesYesYesYesYesYesYesDirect Active Directory Integration via LDAPYesYesYesYesYesYesYesYesYesAuthentication via OpenLDAPYesYesYesYesYesYesYesYesYesSession Based AuthenticationYesYesYesYesYesYesYesYesYesCertificate Based Authentication (Principle Identity)YesYesYesYesYesYesYesYesYesRole Based Access ControlYesYesYesYesYesYesYesYesYesLog ManagementNSX for vSphereStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficevRealize Log Insight Integration1,4YesYesYesYesYesYesYesYesYesSplunk Integration2YesYesYesYesYesYesYesYesYesInstallationNSX for vSphereStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeAutomated Controller DeploymentYesYesYesYesYesYesYesYesYesManual Controller DeploymentYesYesYesYesYesYesYesYesYesAutomated Edge DeploymentYesYesYesYesYesYesYesYesYesManual Edge DeploymentYesYesYesYesYesYesYesYesYesAutomated Host Preparation by ClusterYesYesYesYesYesYesYesYesYesOperationsNSX for vSphereStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficePort MirroringYesYesYesYesYesYesYesYesYesTraceflowYesYesYesYesYesYesYesYesYesTunnel Health MonitoringYesYesYesYesYesYesYesYesNoPort Connectivity ToolYesYesYesYesYesYesYesYesYesSwitch Based IPFIXYesYesYesYesYesYesYesYesYesLLDPYesYesYesYesYesYesYesYesYesAutomated Technical Support BundlesYesYesYesYesYesYesYesYesYesPacket CaptureYesYesYesYesYesYesYesYesYesBackup and RestoreYesYesYesYesYesYesYesYesYesSNMP v1/v2/v3 with TrapsYesYesYesYesYesYesYesYesYesUpgrades and MigrationsNSX for vSphereStandardAdvancedEnterpriseStandardProfessionalAdvancedEnterprise PlusRemote Office / Branch OfficeUpgrade CoordinatorYesYesYesYesYesYesYesYesYesNSX for vSphere to NSX-T Migration CoordinatorYesYesYesYesYesYesYesYesYesNSX Manager to Policy PromotionYesYesYesYesYesYesYesYesYes Notes:1 Please refer to the VMware Product Interoperability Matrices for specific versions supported with NSX-T Data Center.2 Please refer to the NSX-T Data Center release notes for specific versions.3 Please refer to the NSX-T Data Center partner web site for specific versions.4 VMware vRealize Log Insight for NSX provides intelligent log analytics for NSX Data Center. Log Insight provides monitoring and troubleshooting capabilities and customizable dashboards for network virtualization, flow analysis, and alerts. VMware vRealize Log Insight version 3.3.2 and later accepts NSX Data Center Standard/ProfessionalAdvanced/Enterprise Plus edition license keys issued for NSX-T 1.0.0 and later. This means you will have an enterprise level Log Insight license for every license of NSX Data Center.5 VMware Workspace ONE Access - A license to use VMware NSX Data Center includes an entitlement to use the VMware Workspace ONE Access feature, but only for the following functionalities: Directory integration functionality of VMware Workspace ONE Access to authenticate users in a user directory such as Microsoft Active Directory or LDAP.Conditional access policy.Single-sign-on integration functionality with third party Identity providers to allow third party identity providers’ users to single-sign-on into NSX Data Center.Two-factor authentication solution through integration with third party systems. VMware Verify, VMware’s multi-factor authentication solution, received as part of VMware Workspace ONE Access may not be used as part of NSX Data Center.Single-sign-on functionality to access VMware products that support single-sign-on capabilities. 6 Integration with automation tools such as vRealize Automation, vCloud Director, VMware Integrated OpenStack and other OpenStack distributions, Ansible, and Terraform is available for all editions of NSX, however, you must have the appropriate NSX edition for the feature which is automated by these tools. For example automation of load balancing from Terraform or OpenStack requires NSX Data Center Advanced, Enterprise Plus or ROBO. 7 NSX Distributed Threat Prevention requires an additional subscription based purchase. 8 Both IPv4 and IPv6 are supported for all Load Balancing features except for IPv6-VIP-to-IPv4-member and IPv4-VIP-to-IPv6-member translations.9 Requires VDS 7.0 or higher.
For Product offerings for VMware NSX-T Data Center 3.2.x, refer to https://kb.vmware.com/s/article/86095For Product offerings for VMware NSX-T Data Center 4.0.x, refer to https://kb.vmware.com/s/article/89137