Upon Migrating VMs from On-prem to VMC SDDC, the listed properties exhibit the following behaviour
-->A Distributed Firewall (DFW) runs in the kernel as a VIB(vSphere Installation Bundle) package on all the ESXi host clusters that are prepared for NSX. DFW is implemented in the hypervisor and applied to virtual machines on a per-vNIC basis i.e; the firewall rules are enforced at the vNIC of each virtual machine. Thus, DFW rules need to be updated manually on the SDDC as they are not transferred or copied from On-Prem.
Tags
-->Device tags allow identifying a specific device without requiring a device profile, smart group, or compliance policy and without creating a note. The tag feature is integrated with smart groups, meaning tags can be used to define a smart group. Tags are mapped to the device so the Tags associated with the VM’s will remain even if the VMs are migrated from OnPrem to SDDC.