"Migration not Supported for DFW_Section" error encountered when attempting to promote objects from NSX Management Profile

Products

• VMware NSX

Issue/Introduction

• Attempting to promote objects from NSX Management to Policy but an error is encountered stating "Object Promotion failed. Please cancel the promotion and contact VMware support.":
  
  
  
• Entries similar to the below are observed in /var/log/migration-coordinator/migration-coordinator.log

  INFO task-executor-8-1-workitem-MP_TO_POLICY_PRECHECK-ConfigTranslator FeedBackServiceImpl 912365 SYSTEM [nsx@6876 comp="nsx-manager" level="INFO" subcomp="migration-coordinator"] addFeedBackToCache : FeedBackData{error_list='[MpPolicyPromotionFeedBackDataError{error_id='30557', error_desc='Migration not Supported for DFW_SECTION:########-####-####-####-############ having rule configured with <ruleID> as they are having policy service entry associated. Please remove such association and proceed with migration.'}]', mp_Id='########-####-####-####-############', mp_display_name='Section: ########-####-####-####-############', type='DFW_SECTION', timestamp='############

Note: The preceding log excerpts are only examples. Date, time, and environmental variables may vary depending on your environment.

Environment

VMware NSX
VMware NSX-T Data Center

Cause

This is encountered when a firewall rule has been created in Manager but updated with a service in Policy.

Resolution

This is a condition that may occur in a VMware NSX environment.

 

Workaround

1. Use the section UUID and ruleID from the error to identify the problematic rule
2. Remove the service associated with the firewall rule and re-add once the promotion of the object is complete. 

Additional Information

Promote Manager Objects to Policy Objects
Troubleshooting Manager to Policy Objects Promotion