Architecting a VMware NSX Solution : Key Use Cases : 5.2 Securing Applications and Networks in the VMware Cloud Provider Program
   
5.2 Securing Applications and Networks in the VMware Cloud Provider Program
VMware Cloud Providers can enable their customers to configure security rules on the NSX Edge service gateways. This allows the end user to create associated application firewall rules and NAT rules so that their applications are appropriately secured within the cloud environment.
This use case is particularly useful for service providers who offer direct Internet connectivity and public IP addressing from within the customer’s NSX Edge services gateway.
Figure 10. Securing Applications with NSX Edge Firewall and NAT