Default firewall settings apply to traffic that does not match any of the user-defined firewall rules. The default Edge firewall policy blocks all incoming traffic. You can change the default action and logging settings.
You can add an NSX Edge firewall rule for traffic flowing from or to an NSX Edge interface or IP address group. You can add multiple NSX Edge interfaces and/or IP address groups as the source and destination for firewall rules.