nsx-manager-1> get firewall status
context global_status _revision
------- ------------- ---------
logical_routers ENABLED 0
transport_nodes ENABLED 0
2 row(s)
or
esx-1> get firewall status
Firewall Status
----------------------------------------------------------------------
firewall: enabled
headless mode: false
failure policy: open