diff --git a/vmware_nsx/services/fwaas/nsx_p/fwaas_callbacks_v2.py b/vmware_nsx/services/fwaas/nsx_p/fwaas_callbacks_v2.py
index 12717c341c..71e77c8b2a 100644
--- a/vmware_nsx/services/fwaas/nsx_p/fwaas_callbacks_v2.py
+++ b/vmware_nsx/services/fwaas/nsx_p/fwaas_callbacks_v2.py
@@ -180,7 +180,7 @@ class NsxpFwaasCallbacksV2(com_callbacks.NsxCommonv3FwaasCallbacksV2):
             return group_id
 
     def _create_network_group(self, domain_id, router_id, neutron_net_id):
-        scope_and_tag = "%s:%s" % ('os-neutron-net-id', neutron_net_id)
+        scope_and_tag = "%s|%s" % ('os-neutron-net-id', neutron_net_id)
         tags = []
         tags = nsxlib_utils.add_v3_tag(tags, ROUTER_FW_TAG, router_id)
         expr = self.nsxpolicy.group.build_condition(