The error message above indicates that the NSX manager could not download OVA.
To resolve the issue, open port 4119 from the NSX manager and ESXi hosts to Deep Security Manager (DSM). The ESXi hosts and their vCenter server should have an access to Trend Micro servers via port 4119.
For more information about the Deep Security ports, you may refer to this article: Communication ports used by Deep Security.