Creating a rule using IDFW AD groups causes ERROR "Identity groups cannot be used in the custom project"

Products

• VMware vDefend Firewall
• VMware vDefend Firewall with Advanced Threat Prevention

Issue/Introduction

Creating a firewall rule using IDFW AD groups in a custom project will cause an error 

A full ERROR will display in a red banner above the rule section in distributed firewall. 

• Error: Identity groups cannot be used in the custom project rule, /orgs/default/projects/1234-UUID/infra/domains/default/security-policies/351d-UUID/rules/UUID-String. (Error code: 610124)

Environment

VMware vDefend

Cause

The use of custom projects with IDFW AD Groups is not permitted. 

Resolution

Use the default option at the top NSX GUI taskbar.