To create NSX Security Policy with Deep Security enabled as both Endpoint Service and Network Introspection service:

1. On your vSphere Web Client, go to Home > Networking & Security > Service Composer.
2. Select the Security Policies tab and click the New Security Policy icon.

   

3. Enter a name for the new policy.

   

4. Click Next.
5. Click the green plus sign (+) to add an Endpoint Service.
6. Provide a name for the Endpoint Service and leave the following default settings:
   • Action: Apply
   • Service Type: Anti Virus
   • Service Name: Trend Micro Deep Security
   • Service Configuration: Deep Security Profile Configuration
   • State: Enabled
   • Enforce: No

   

7. Click OK, and then click Next.
8. Do not make any changes on the Firewall Rules, and click Next.
9. On the Network Introspection Services option, add two (2) services, an outbound and an inbound traffic.
   1. Click the green plus sign (+) to create a new outbound service.
   2. Enter a name, which includes the word "Outbound", for the service.
   3. Configure the following settings for the Outbound service:
      • Action: Redirect to service
      • Service Name: Trend Micro Deep Security
      • Profile: Name of the service profile you created earlier
      • Source: Policy's Security Groups
      • Destination: Any
      • Protocol: Any
      • State: Enabled
      • Log: Do not log

      

   4. Create the inbound service by clicking the green plus sign (+).
   5. Provide a name, which includes the word "Inbound".
   6. Configure the following settings for the Inbound service:
      • Action: Redirect to service
      • Service Name: Trend Micro Deep Security
      • Profile: Name of the service profile created earlier
      • Source: Any
      • Destination: Policy's Security Groups
      • Protocol: Any
      • State: Enabled
      • Log: Do not log

      

10. Click OK on the Add Network Inspection Service window.
11. Click Finish to complete and close the New Security Policy window.