Error code: 500157 when attempting to delete DFW rules on a NSX Manager with expired licenses

Products

• VMware vDefend Firewall
• VMware vDefend Firewall with Advanced Threat Prevention

Issue/Introduction

In VMware NSX environments with expired licenses, Distributed Firewall (DFW) rules cannot be deleted through the UI, and error code 500157 is displayed.

Environment

A NSX Manager with expired licenses. 

Cause

A NSX manager with expired licenses can only delete or view DFW rules. When you delete DFW rules in UI, UI uses PATCH API to make any DFW changes.

Resolution

Use DELETE API to delete a DFW rule:
DELETE /policy/api/v1/infra/domains/{domain-id}/security-policies/{security-policy-id}/rules/{rule-id}
DELETE /policy/api/v1/orgs/{org-id}/projects/{project-id}/infra/domains/{domain-id}/security-policies/{security-policy-id}/rules/{rule-id}