To control the incoming and outgoing network traffic to and from an NSX-T Data Center edge gateway, you create firewall rules. Add an NSX-T Data Center Edge Gateway Firewall Rule (vmware.com)