VMware NSX-T Security: Negated blocking approach

Iterative firewall approach where illegal traffic is blocked away bit by bit, rather than having the regular "per use-case allow" approach.