I was part of the NSX troubleshooting team from VMware, where we worked with different customers to troubleshoot their NSX operational issues. Also, I was part of the design and deployment team. We do PSO projects and migration for customers.
The most valuable feature of VMware NSX is the DFW (distributed firewall). The distributed firewall is much better and more powerful than the physical firewall because it's applied at the beginning level.
The software-defined version of VMware NSX contains all the security features like IPS and IDS. In the physical space, you have to get separate IDS, security, or load balancer products. VMware NSX provides several features like VPN, load balancers, DFW, and gateway firewall.
Since most people are very much used to physical networking, they find it difficult to use VMware NSX in the initial stage.
I have been using VMware NSX for the past six years.
The solution's stability is very good compared to its older versions. It is advisable not to go in a production environment with the latest version because it might sometimes have new features that can break.
I rate VMware NSX a nine out of ten for stability.
We can easily scale the solution with the current product version if we have more users.
I rate VMware NSX a nine out of ten for scalability
The solution's implementation is easy.
The initial phase of deployment involves deploying three NSX Managers. Then, you have to plan to do a lot of things like configurations and routing. If you have everything ready for configuration, you should be able to complete the VMware NSX installation in a month.
In the case of daily deployment, it depends on how much we are deploying and how many configurations we are doing. Two weeks should be more than sufficient to complete the configurations if we do it daily.
VMware NSX is a cheaper product compared to its competitor, Cisco.
Since most people are very much used to physical networking, they find it difficult to use VMware NSX in the initial stage. However, once you start using it, you'll be very much fond of the particular product. VMware NSX is very easy to manage.
You can deploy the solution on the cloud or on-prem, depending on the customer's requirement.
When changing from the physical to the virtual space, you have to plan the routing part. You'll have a hardening of networks in the physical space. However, when you bring it to NSX, everything is at the hypervisor level in the virtual space. That's one thing you will have to plan because a few critical applications might require a VLAN-backed network.
They have a restriction that they can't move it to the overlay networks and must remain in the physical VLAN. We have to plan properly for migrations because improper planning can break the current network or operations.
It would be good if users use all the features in the solution to have everything in one place. Users can access the web UI to manage security, load balancer, and VPN protection.
Overall, I rate VMware NSX an eight out of ten.