SSP App Discovery Reversion Script.

Products

• VMware vDefend Firewall with Advanced Threat Prevention
• VMware vDefend Firewall

Issue/Introduction

Customers who have published policies and inventory assets generated through Segmentation Planning on SSP may want to undo these publications before discarding or restarting the analysis. Simply discarding the analysis through SSP will not revert the publications made to NSX.

This script identifies the groups, policies, rules, and tags published through an existing Segmentation Planning analysis and provides the option to revert them.

 

Environment

This script requires SSP 5.1 or above. This script is not applicable to earlier versions of SSP.

Cause

If publications are made to NSX through Segmentation Planning, they will remain on NSX even if the "Discard & Restart" button is used within Segmentation Planning. Publications that remain on NSX can include:

• Hierarchy groups, such as Applications, Application tiers, and Environments.
• Policies and Rules.
• Tags that have been added to assets.
• Tags that have been removed from assets.

Resolution

Please Contact Broadcom Support team to run this script.