VMware NSX Cookbook

There's more...

Each NSX manager evaluates all rules (local or universal), with universal rules being evaluated first. The following diagram shows a logical representation of how universal firewall sections and local firewall sections are tiered, and the evaluation process:

The thing to note from the preceding diagram is each NSX Manager maintains its own local sections and, most importantly, its own default local firewall section. This means that the default rule is independent across NSX Manager domains and should be kept in sync across all NSX Managers for the consistent enforcement of policy.