--- title: VMware vDefend Distributed Firewall url: https://www.vmware.com/products/security/vdefend-distributed-firewall description: Prevent lateral threat spread in private clouds with zero-trust microsegmentation via a network-agnostic Layer 7 firewall. --- # VMware vDefend Distributed Firewall Enhance your VCF private cloud security posture across all workloads by protecting east–west traffic from the lateral spread of threats and accelerating your Zero Trust journey. [View Datasheet](https://www.vmware.com/docs/vmw-vdefend-ds) ## Comprehensive Zero Trust Lateral Security Sophisticated ransomware attacks and threat actors move laterally through your private cloud. Gain strong Zero Trust lateral security with a hypervisor-native, software-defined, distributed Layer 7 firewall that delivers context-based, granular enforcement at scale across all VCF workloads - virtual machines, containers, and bare metal. ![Deep Workload-Level Visibility and Control](https://www.vmware.com/media/blt8c9a8aaca0ffd4ac/bltfbaf0cea45cda82e/660d504e2e3b79e60e064202/illu-netw-secureewtraffic-whtbg.png) ### Deep Workload-Level Visibility and Control Gain workload-level visibility through all application flows and quickly achieve macro- and microsegmentation. Automatically create context-aware policies to easily enable the principle of least privilege for application workloads. ### Advanced Threat Detection and Prevention Deploy high-performance, distributed intrusion prevention to defend against modern threats. Inspect traffic to block emerging exploits, maintain regulatory compliance, and deliver virtual patching to protect vulnerable workloads. ![Advanced Threat Detection and Prevention](https://www.vmware.com/media/blt8c9a8aaca0ffd4ac/blt588cf4df7fded0fd/660d54a56ab9f782e67d33e2/illu-vmw-sec-threatdetection-whtbg.png) ### Application Agility with Security Enable scale-out security at application speed as your private cloud grows. Ensure applications maintain their security policies throughout their lifecycle, regardless of where they live or move. ## Key Capabilities ### Distributed Architecture Protect every app with a distributed, scale-out L7 stateful firewall hypervisor-integrated for VMs, and eliminate the cost and complexity of traffic hair-pinning. ### No Network Changes Radically simplify firewall deployment and operations without changing your network, and realize the power of contextual security policies with VM mobility. ### Scalable Traffic-Flow Analysis Leverage granular visibility & deep analytics to gain valuable application insights. Enable rule recommendations to rapidly deploy microsegmentation at scale. ### Elastic Protection Automatically scale firewalls as your workloads expand for massive traffic inspection and policy enforcement capacity, eliminating constraints of hardware firewalls. ### Superior Workload Context Enable workload and network contexts from the hypervisor perspective to simplify policy creation and speed up firewall operations even during VM mobility. * [READ DATASHEET](https://www.vmware.com/docs/vmw-vdefend-ds) ## Address Critical Security Use Cases - Application Visualization - Zero Trust - Security Automation - Secure VCF ### Get App Visibility and Rule Guidance Get real-time application visibility and security posture with contextual application topology maps. Identify security gaps and get granular policy recommendations for private cloud segmentation. ![Get App Visibility and Rule Guidance](https://www.vmware.com/media/blt8c9a8aaca0ffd4ac/bltdb3c010486389df1/660e51cee838c8264860ed10/illu-mcld-datacenter-1-whtbg.png) ### Operationalize Zero Trust with Microsegmentation Micro-segment workloads with prescriptive workflows to achieve Zero Trust for your private cloud. Reduce the attack surface and isolate applications with contextual segmentation policies that restrict threat lateral movement. ### Deploy Security as Code Deliver “security as code” with an API-first object-based model that provides policy recommendations, automates deployment of configuration, and ensures new workloads receive the right security policies. * [More On Security Automation](https://www.vmware.com/docs/beginners-guide-to-automation-with-vdefend-firewall) ### Hypervisor-Native Defense in VCF Private Cloud Protect VCF private cloud workloads from malicious actors with multi-layer defense across workload and management domains. Define workload communication policies to prevent lateral movement by threat actors. * [MORE ON SECURE VCF](https://www.vmware.com/docs/vmware-secure-private-cloud-with-vmware-vdefend) ## Case Studies ![Dubai Airport](https://www.vmware.com/media/blt8c9a8aaca0ffd4ac/blt1b9042686c3dde76/6a3bcfb095d6e1376b67a80d/www-logo-dubai-airport.png) VMware Cloud Foundation and VMware vDefend form the bedrock of our virtualization strategy. They unify and streamline operations across our compute, storage, networking and security infrastructure. — Biju Hameed Kayal, Head of Technology Infrastructure Operations * [READ CASE STUDY](https://www.vmware.com/resources/customers/dubai-airports-elevates-its-private-cloud-with-vmware-cloud-foundation-and-vdefend) ![St. John's Health](https://www.vmware.com/media/blt8c9a8aaca0ffd4ac/blt076fc193f99bd6ec/67db65845baf48c6033b0daa/St_Johns_Health_Logo.jpg) Visibility into all of our applications is one of the most important capabilities we can have. VMware vDefend products give us greater visibility into our workloads, allow us to troubleshoot issues quickly and help us make sure that we’re only allowing certain information to go where it’s needed to support patient care. — Tyler Wertenbruch, IT Technical Manager * [Read Case Study](https://www.vmware.com/resources/customers/st-johns-health-protects-private-cloud) ![USS Federal Credit Union](https://www.vmware.com/media/blt8c9a8aaca0ffd4ac/blt87b9c3179a890e80/660d39ced072deed8a5c4358/vmw-ussfcu-logo.jpg) The internal firewall and micro-segmentation capabilities of NSX Data Center enabled us to rapidly deliver on our CIO’s Zero Trust initiative. — Mark Fournier, Director of IT Infrastructure * [Read All Stories](https://www.vmware.com/resources/customers?products[]=VMware%20vDefend%20Distributed%20Firewall&products[]=VMware%20vDefend%20Advanced%20Threat%20Prevention&solutions[]=VMware%20Security%20and%20Resiliency) ## Related Products [VMware vDefend Advanced Threat Prevention](https://www.vmware.com/products/security/vdefend-advanced-threat-prevention) Protect VCF workloads with a comprehensive, multi-layer defense. [VMware vDefend Gateway Firewall](https://www.vmware.com/products/security/vdefend-gateway-firewall) Enforce zone-based controls with this next-generation internal firewall. ## Resources ### [VMware Security Blogs](https://blogs.vmware.com/networkvirtualization/) Read up on the latest network security topics. ### [Partners](https://www.broadcom.com/how-to-buy/partner-distributor-lookup) Use Partner Locator to quickly find a VMware partner near you. ### [Broadcom Inc. VMware vDefend Product Applicability Guide for PCI DSS 4.0.1](https://www.vmware.com/docs/broadcom-vmware-vdefend-product-applicability-guide-for-pci-dss) ### [Broadcom Inc. VMware vDefend Product Applicability Guide for NIST CSF 2.0](https://www.vmware.com/docs/WP_vDefend_CSF_2026) ### [Broadcom Inc. VMware vDefend Product Applicability Guide for HIPAA](https://www.vmware.com/docs/broadcom-vmware-vdefend-product-applicability-guide-for-hipaa) [See All Resources](https://www.vmware.com/resources/resource-center?product[]=VMware%20vDefend%20Distributed%20Firewall) ## FAQs ### How does vDefend Distributed Firewall work? vDefend Distributed Firewall uses a software-based approach to deliver security that's built into the hypervisor and delivered at each workload. This enables it to enforce access controls and inspect every flow for threats without traffic hair-pinning. It includes a stateful L7 firewall, an intrusion detection/prevention system (IDS/IPS), network sandbox, and behavior-based network traffic analysis and network detection & response. ### What are the key capabilities of vDefend Distributed Firewall? - Distributed architecture - Superior workload context - No network taps NTA - Elastic throughput - Operationally simple For full capabilities, see the [datasheet](https://www.vmware.com/docs/vmw-vdefend-firewall). ### What are the use cases for vDefend Distributed Firewall? Use cases for vDefend Distributed Firewall include: - Network Segmentation - Zero Trust in the Cloud - Virtual Patching for all Workloads - Stop lateral movement of threats ### What are the benefits of vDefend Distributed Firewall? Benefits of vDefend Distributed Firewall include: - Better Security - No network changes - Eliminate blind spots - Security as code - Operational simplicity ## Ready to Get Started? * [CONTACT SALES](https://go-vmware.broadcom.com/contact-us) ## Also of Interest - [VMware vDefend Gateway Firewall | Internal Firewall](https://www.vmware.com/products/security/vdefend-gateway-firewall) - [Infrastructure Security Solutions for VMware Cloud Foundation](https://www.vmware.com/solutions/security) - [VMware vDefend](https://www.vmware.com/products/security/vdefend)