topic Re: Failure to Commit changes in Panorama after removing a firewall as managed device in Panorama Discussions

Failure to Commit changes in Panorama after removing a firewall as managed device

popeja — Tue, 21 Dec 2021 13:24:51 GMT

I removed a firewall that is managed through Panorama by going to Panorama > Managed Devices > Summary, selecting my firewall then selecting delete. This removed the firewall for me succesfully. However, when I go to make a Commit in Panorama it throws an error saying

When I search for that serial number in Panorama it sure enough comes up on a couple of my QoS policies as a target device. I can even see the serial number listed as a target device on the summary of the policy. However, when I open the Policy and go to the Targets tab, it's not listed anywhere to remove it.

Has anyone ran into this problem before and have a solution or any ideas I can try?

Thanks!

Re: Failure to Commit changes in Panorama after removing a firewall as managed device

PavelK — Tue, 21 Dec 2021 22:14:58 GMT

Thank you for the post @popeja

Could you make sure that managed Firewall was removed from below configurations:

- Panorama > Device Groups > Then navigate to Device Group: Branch_Single-Homed, then deselect Firewall from Device Group.

In addition, to properly remove managed Firewall from Panorama, I would recommend remove it from below sections:

- Panorama > Templates > Then navigate to Template Stack where Firewall is located, then deselect Firewall from Template Stack.

- Panorama > Collector Group > [Collector Group Name] > Device Log Forwarding > Log Forwarding Preferences > Modify > Then deselect Firewall. This option is relevant if you collect logs from managed Firewall.

- Panorama > Device Deployment > Dynamic Updates > Schedules > [Scheduler Name] > Then deselect Firewall. This option is relevant if you install updates from Panorama to managed Firewall.

After you complete all these steps, there should be nothing left preventing you to commit it.

Kind Regards

Pavel

Re: Failure to Commit changes in Panorama after removing a firewall as managed device

popeja — Wed, 22 Dec 2021 13:21:10 GMT

Thanks the for the reply PavelK. I should have mentioned that I've remove the firewall from all these already. No luck.

Re: Failure to Commit changes in Panorama after removing a firewall as managed device

popeja — Wed, 22 Dec 2021 16:08:33 GMT

I was able to get around this issue by adding that serial number back as a managed device. Next I re-added it to the device group. Then removing this serial number from the dynamic updates schedule like Pavel said and I was also able to see this in the QoS policies again to remove there.

My commit finally completed successfully.