Symptoms:
VMware NSX for vSphere 6.4.x
VMware NSX for vSphere 6.3.x
This issue is resolved in:
Workaround:
To work around this issue if you do not want to upgrade, run a 'Force Sync' of firewall services to vSphere Clusters with impacted ESGs/DLRs which removes the slot-2 dvFilter.
Note: This is a temporary solution, as the filter may be applied again should the appliances be re-deployed or upgraded. The slot-2 filter will also be applied to any newly created ESGs until the stale DB entry is removed.
To remove the stale cluster entry from the firewall_status_cluster table, contact Broadcom Support and quote this Knowledge Base article ID (314295) in the problem description.