The VMware NSX Distributed Firewall is unique in the market for its ability to operate at the vNIC level, in kernel in the hypervisor - giving you control you’ve never had before.
How about Decryption !! would packets be already decrypted since they are on kernel level Or It would be decrypted on some other point? and how this will impact performance ?
Try setting up 1000s of windows firewalls lol, This is more for virtual networks such as an enterprise network with a bunch of servers setup to only host VM's it takes the manual labor so to speak out of things. You don't need to setup anything but once and move the settings across the whole virtual network. Very cool stuff here and by far one of the best things to familiarize yourself with if you plan on ever expanding into virtual networking on a business level.