Recently, we came across a migration project where all workloads needed to move from a DVPG to an NSX-backed overlay segment. Previously, East-West (E-W) communication was handled by a physical Palo Alto firewall. Now, as all VMs will be migrated behind the NSX overlay segment and the gateway changes from Palo Alto to NSX Tier-1…