delete_dfw_rule
Permanently delete a single DFW rule from its parent security policy. Removal is irreversible and takes effect on the NSX data plane immediately.
Instructions
[WRITE] Permanently delete one DFW rule from its parent security policy.
Deletion is irreversible and takes effect immediately on the NSX data plane: traffic the rule matched falls through to lower-priority rules or the policy's default action. Confirm the rule_id with list_dfw_rules and check recent hits with get_dfw_rule_stats before deleting. To remove an entire policy use delete_dfw_policy (it refuses while rules remain); this tool deletes a single rule without that guard. Calls are pre-checked by the vmware-policy engine (risk level: high) and audited to ~/.vmware/audit.db; the CLI equivalent additionally requires double confirmation.
Returns {"status": "deleted", "message": ...} on success, or {"error", "hint"} on failure (e.g. rule not found, connectivity).
Args: policy_id: ID of the parent security policy (alphanumeric and hyphens), as returned by list_dfw_policies. rule_id: ID of the rule to delete within that policy, as returned by list_dfw_rules. target: Optional NSX Manager target name from config. Uses the default target if omitted.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| policy_id | Yes | ||
| rule_id | Yes | ||
| target | No |