Creating a distributed firewall section in Manager UI fails with: Error message: Invalid anchor id : FirewallSection/<uuid> (Error code: 96205)

Products

• VMware NSX

Issue/Introduction

• NSX-T 4.0.x is in use
• Creating a firewall section in Manager UI (Security -> Distributed Firewall -> Add Section Above/Below) fails.
• UI shows the following error:

Http failure response for https://<manager>/api/v1/firewall/sections?id=<uuid>&operation=insert_before: 400 Bad Request Error message: Invalid anchor id : FirewallSection/<uuid> (Error code: 96205) 

• On the NSX Manager, the nsxapi logs show the following

/var/log/proton/nsxapi.log
2023-01-11T05:07:11.295Z INFO http-nio-127.0.0.1-7440-exec-51 NsxBaseRestController 26044 SYSTEM [nsx@6876 comp="nsx-manager" level="INFO" subcomp="manager"] Error in API /nsxapi/api/v1/firewall/sections?id=<uuid>befe&operation=insert_before caused by exception com.vmware.nsx.management.security.base.exceptions.SecurityException: {"moduleName":"Distributed Services","errorCode":96205,"errorMessage":"Invalid anchor id : FirewallSection/<uuid>"}

Environment

VMware NSX 4.0.x

Cause

A default section is used as an anchor while creating firewall sections in the Manager UI.

Resolution

This issue is resolved in VMware NSX 4.1.0, available at Broadcom downloads.

If you are having difficulty finding and downloading software, please review the Download Broadcom products and software KB.

Workaround:
There is no workaround for the affected versions. As Manager API is deprecated, Policy API should be used.