Assigning NSX policies
In NSX, security policies are assigned to security groups. A security group can contain various vCenter objects, such as datacenters, clusters and virtual machines.
To assign a security policy to a security group:
Log in to vSphere Web Client.
Go to Network & Security > Service Composer and click the Security Groups tab.
Create as many security groups as needed. For more information, refer to VMware documentation.
You can create dynamic security groups, based on the security tags. This way, you can group all virtual machines found infected.
Right click the security group you are interested in and click Apply Policy.
Select the policy to apply and click OK.