5.1

2 Change the name, action, or comments for the rule.
3 Click OK.
n
To add a rule:
1 Click Add Rule in the Actions column.
2 Complete the form to add a rule.
You cannot add a protocol, IP address, or MAC address as the source or destination for a firewall
rule. If the source or destination for the rule is an IP or MAC address, you must create an IPSet
or MACSet for that address. If the source or destination for the rule is a protocol, you must create
a service for that address.
For information on completing the firewall rule form, see “Add a Firewall Rule,” on page 163.
3 Click OK.
The rule is added at the top of the firewall rule table.
Change the Date Range of the Flow Monitoring Charts
You can change the date range of the flow monitoring data for an historical view of traffic data.
Procedure
1 In the vSphere Client, select a datacenter, virtual machine, port group, network adapter, or virtual wire.
Option Action
Select a datacenter or virtual
machine
a Go to Inventory > Hosts and Clusters.
b Select a datacenter or virtual machine.
c Click the vShield tab.
Select a port group or network
adapter
a Go to Inventory > Networking.
b Select a port group or network adapter.
c Click the vShield tab.
Select a virtual wire
a Go to Inventory > Hosts and Clusters and select the Network
Virtualization tab.
b Click the Networks tab.
c In the Name column, click the virtual wire for which you want to add a
rule.
d Click the Security tab.
NOTE The Flow Monitoring tab for a virtual wire is available only if vShield
App is installed on at least one of the hosts in the cluster from which the
virtual wire has been created. Flow monitoring data is displayed only for the
traffic passing through the host which has vShield App installed on it.
2 Click Flow Monitoring.
The charts update to display the most current information for the last twenty four hours. This might take
several seconds.
3 Next to Time Period, click Change.
4 Select the time period or type a new start and end date.
The maximum time span for which you can view traffic flow data is the previous two weeks.
5 Click Update.
Chapter 12 vShield App Flow Monitoring
VMware, Inc. 159