Yes. vShield is deprecated. So you should go the NSX way.
You need at least the NSX Manager, NSX Controllers and a transport zone.
VXLANs are automatically created in the background in the form of logical switches as soon as a customer creates an Org or vApp network.