After updating or creating a distributed firewall rule the publish fails with the error "Must be a valid IPv4 or IPv6 address (with or without prefix length) or hyphenated range.
”
This issue is resolved in VMware NSX Data Center for vSphere 6.4.7 and later versions
To work around the issue, either: