2026-04-18 10:12:10 -05:00
2026-04-18 10:12:10 -05:00
2026-04-18 10:12:10 -05:00
2026-04-18 10:12:10 -05:00
2026-04-18 10:12:10 -05:00
2026-04-18 10:12:10 -05:00
2026-04-18 10:12:10 -05:00

NSX Security Blueprints

Python-based automation scripts for deploying NSX tags, security groups, and security policies for enterprise applications.

Supported NSX Versions

  • NSX 4.x
  • NSX 9.x

Structure

nsx_blueprints/
├── shared/                  # Shared utilities, NSX API client, constants
├── infra/                   # Infrastructure policy (DNS, NTP, AD) — Infrastructure DFW category
├── epic/                    # EPIC EHR application blueprint
├── horizon_view/            # Omnissa Horizon View (VDI) blueprint
└── _template/               # Generic blueprint template for new applications

Blueprints

Blueprint DFW Category Description
Infrastructure Infrastructure Shared services — DNS, NTP, Active Directory security groups and policy
EPIC Application EPIC Electronic Health Records — tags, security groups, and DFW policy
Horizon View Application Omnissa Horizon View VDI — tags, security groups, and DFW policy
Template Application Generic starting point for new application blueprints

Conventions

Tag Naming

<AppName>|<Tier> — e.g. EPIC|Web, EPIC|App, EPIC|DB

Security Group Naming

SG-<AppName>-<Tier> — e.g. SG-EPIC-Web, SG-EPIC-DB

Policy / Rule Naming

  • Policy: Policy-<AppName>
  • Rules: descriptive action-first names, e.g. Allow-HTTPS-Web, Deny-All

Prerequisites

  • Python 3.10+
  • requests library
  • NSX Manager credentials with appropriate RBAC permissions

Usage

Each blueprint directory contains its own README.md with application-specific setup and run instructions.

pip install -r requirements.txt
python epic/deploy.py --nsx-manager <IP> --username <user> --password <pass>
S
Description
Repo of NSX Security Blueprints for applications
Readme
34 KiB
Languages
Python 100%