THE MEDIUM UNLOCK TIME INSTALL

Proxy ARP support on Active/Active Tier-0 Gateway - In simple topologies without a need for dynamic routing, a Tier-0 gateway in active/active HA mode can now be used, providing higher throughput.This allows a better distribution of the traffic across all the available Service Routers (SRs). With this feature, the hashing is based on IP address source, IP address destination, IP protocol, layer-4 port source, layer-4 port destination. 5-tuple ECMP on ESXi and KVM - The distributed router (DR) hosted on ESXi now supports 5-tuple hashing algorithm when ECMP is enabled.ESXi now supports ECMP towards multiple physical routers in the fabric and test the availability of the routers with BFD. In this deployment model, the Tier-0 SR (Service Router) hosted on the Edge Node is still necessary only to handle the control plane, i.e., advertising the connected prefixes through EVPN l2vpn address-family to the fabric. Support 元 EVPN route server mode - ESXi is now capable of directly sending VXLAN traffic to the data center fabric routers bypassing the Edge node in the data path.NSX Data Center for vSphere to NSX-T Data Center Migration.Distributed Intrusion Detection/Prevention System (D-IDPS).In addition to these features, many other capabilities are added in every area of the product. For more information on these vulnerabilities and their impact on VMware products, please see VMSA-2021-0028. Improved protection against Log4j vulnerability: Updated Apache Log4j to version 2.16 to resolve CVE-2021-44228 and CVE-2021-45046.NSX for vSphere to NSX-T Migration: Major enhancements to the Migration Coordinator to extend coverage of supported NSX for vSphere topologies and provide flexibility on the target NSX-T topologies.

THE MEDIUM UNLOCK TIME INSTALL

Improved integration with NSX Advanced Load Balancer (formerly Avi): Install and configure NSX ALB (Avi) from NSX-T UI Migrate NSX for vSphere LB to NSX ALB (Avi).Enhanced Distributed Security: Malware detection and Prevention, Behavioral IDS/IPS, enhanced application identities for L7 firewall.Gateway Security: Enhanced L7 App IDs, Malware Detection and Sandboxing, URL filtering, User-ID firewall, TLS inspection (Tech Preview) and Intrusion Detection and Prevention Service (IDS/IPS).Switch agnostic distributed security: Ability to extend micro-segmentation to workloads deployed on vSphere networks.NSX-T Data Center 3.2.0 is a major release offering many new features in all the verticals of NSX-T: networking, security, services and onboarding.

The medium unlock time