A security administrator needs to configure a firewall rule based on the domain name of a specific application. Which field in a distributed firewall rule does the administrator configure?

To configure a distributed firewall rule based on a domain name, an administrator uses a Layer 7 Context Profile. This profile is configured with the specific Fully Qualified Domain Name (FQDN) attribute. The administrator then applies this context profile to the firewall rule by configuring the 'Profile' field of that specific rule. This action enables the distributed firewall to perform deep packet inspection on DNS traffic to resolve and enforce policies based on the specified domain name, rather than just an IP address.

B. Service: This field defines Layer 4 information like protocols (TCP/UDP) and port numbers, not Layer 7 application identifiers like domain names.
C. Policy: A policy is a high-level grouping or container for a set of related firewall rules, not a configurable field within an individual rule.
D. Source: While a domain name logically represents a source or destination, the 'Profile' field is the specific mechanism used to apply FQDN-based logic to the rule.

1. VMware NSX-T Data Center 3.2 Security Guide, "Context Profiles," Page 101. The document states, "You can create a context profile with the Domain Name (FQDN) attribute and use it in a distributed firewall rule."

2. VMware NSX-T Data Center 3.2 Security Guide, "Add a Distributed Firewall Rule," Page 81, Step 9. The procedure for creating a rule explicitly details configuring the 'Profiles' column: "In the Profiles column, click the edit icon and select a context profile to apply to the rule."

3. VMware NSX-T Data Center 3.2 Security Guide, "FQDN Filtering and URL Filtering," Page 108. This section explains, "To use FQDN filtering, you must...add an FQDN Analysis profile to the distributed firewall rule." This confirms the profile is the key component.