NSX Security Overview and Edge Monitor dashboard fails to load with error "Failed to get report - A data-source execution error for a report".

Products

• VMware vDefend Firewall with Advanced Threat Prevention
• VMware vDefend Firewall

Issue/Introduction

The NSX Security Dashboards and System Dashboard, such as the TLS Inspection Dashboards and Edge Monitoring Dashboards error out and do not display any data.

The error illustrated in the UI is similar to "Failed to get report - A data-source execution error for a report".

See below example of errors:

Environment

Security Services Platform 5.0

NSX 4.2.0.x

NSX 4.2.1.x

Cause

NSX 4.2.0.x and NSX 4.2.1.x Security Dashboards fetch the Security Services Platform FQDN via an older/legacy NSX API. Security Services Platform will attempt to configure NSX such that this API returns the correct FQDN. However, in some cases, it is not possible for Security Services Platform to configure this NSX API, resulting in this error on specific dashboards.

Some cases where this may occur:

1. Air-gapped NSX Environment - If the Security Services Platform Installer FQDN uses an invalid TLD (Top Level Domain). A list of valid TLDs can be found at: https://www.icann.org/en/contracted-parties/registry-operators/resources/list-of-top-level-domains

2. Air-gapped NSX Environment - If Security Services Platform Installer is not reachable from the NSX manager(s) being onboarded to Security Services Platform.

3. Any NSX Environment < NSX 4.2.2 - Depending on circumstance, there may be a stale NSX Application Platform version recorded on NSX which results in NSX API validation errors.

Resolution

This issue is fixed in NSX 4.2.2. Upgrading to the latest NSX 4.2.2.X release is recommended in order to resolve the issue.