SSP: Unable to delete application uber groups on NSX manager after off-boarding from SSP

Products

• VMware vDefend Firewall
• VMware vDefend Firewall with Advanced Threat Prevention

Issue/Introduction

Applications created on SSP create corresponding uber groups on the onboarded NSX manager. When these applications are marked for Flow Prioritization and the manager is off-boarded without deleting or de-prioritizing them, the uber groups remain dangling on the manager with no way to manage them directly from the UI.  

while deleting groups from the NSX manager, Below error was observed on NSX UI

Error: Unable to process request. NAPP is not installed.(Error code.92063)

Environment

SSP 5.1 with NSX 4.2.1 

Cause

When the uber group deletion intent is submitted, the deletion logic will first check if the group holds any reference to any other corfu DB object. Since the group was prioritized before, it will be added as a member of the IntelligenceFlowCollectionEntityInfo object (created to hold all prioritized groups and apps) and group deletion will fail because of the membership reference. 

Resolution

Run the below command on the NSX manager to drop the Corfu table that is blocking the group delete. 

/opt/vmware/bin/corfu_tool_runner.py -o clearTable -n nsx -t IntelligenceFlowCollectionEntityInfo

Attempt the group deletion again; this time it should succeed.