Error: "VDC Group <VDC Group Name> with existing firewall groups cannot be deleted. Please delete associated firewall groups." when trying to delete a VDC group.

Products

• VMware Cloud Director

Issue/Introduction

• You are unable to delete the Data Center Group(DCG) in VMware Cloud Director (VCD). You get the following error:
  
  "VDC Group with existing firewall groups cannot be deleted"
  
  
• You are unable to delete the Organization VDC(OVDC) associated with the DCG in VCD. 

Environment

VMware Cloud Director 10.6.X

Cause

The issue occurs when there are IP Sets, Static Groups or Dynamic groups still associated with the Firewall Rules for the edges that are included in the DCG. 

Resolution

To workaround the issue please check if there are any IP sets on the Datacenter group which can be deleted and try to delete the Datacenter once the IP sets have been removed.
To delete the IP set(s) please follow the below steps:

1. Login to the Tenant UI.
2. Navigate to Networking > Data Center Groups.
3. Click on the Data Center Group name.
4. Navigate to Security > Static Group > 
5. After selecting the Static group(s) hit the DELETE button to delete any Static group(s).
6. Repeat Step 4 and Step 5 for IP-Sets and Dynamic Groups.
7. Now try deleting the DCG and it should be deleted successfully.