At the new gig they were considering NSX as part of another technology purchase. But when they got the $$$ quote for NSX they begged off. I was hoping they'd do it so I could implement east-west network controls. Are there some other means to get there - that is firewall at each VM but manage the rules for all the VMs (or a subset) through a central management pane? I'd at least like to protect their most critical hosts from east west threats but I don't want to manage a bunch of firewalls on local hosts. I had heard perhaps Norton has something in this space? Does Microsoft have something? Other offerings I should consider? Thank you.