This issue is resolved in NSX-T Data Center 3.2.1.1, available at
VMware Downloads.
Workaround:
An NSX-T upgrade is advised. If that is not possible please review the workaround options.
If this issue is already present in the environment, restart the the Controller service on each Manager to clear the condition
as admin user
>restart service controllerIt may take a few minutes for the condition to clear and it is possible the condition may recur at a later time.
To completely prevent this issue on affected versions, it is necessary to use DFW rules that do not use Groups.