We can use NSX dFW windout enable network virtualization (VXLAN and NSX Controller) on the Cluster.
NSX dFW can work on both VSS or vDS
NSX DFW operates at the VM vNIC level, meaning that a VM is always protected irrespective of the way it is connected to the logical network.
VM can be connected to a VDS VLAN-backed port-group or to a Logical Switch (VXLAN-backed port-group).
