topic Rollback Multi Virtual System Capability tick box on the Firewall. in General Topics

Rollback Multi Virtual System Capability tick box on the Firewall.

SachinGargNTT — Tue, 15 Aug 2023 11:16:28 GMT

Hi team,

Can you help me with an issue that has occurred. We were on the process of adding an extra vsys on our firewall when we realized that this model of firewall requires a license for it to be activated.

Since there was no license, we have reversed all the changes except the Multi Virtual System Capability tick box on the firewall.

So, we have two issue need answer for.

1. Will unchecking Multi Virtual System Capability tick box on the firewall (ie;Rollback) cause any issue ?

2. After we rolled back the config except Multi Virtual System Capability tick box on the firewall, we are facing policy push issue. (ie; We are able to commit changes to the firewall successfully, however policy changes are not appearing on the firewall despite a successful commit.)

Model:Panorama

VM Mode:ESxi

Software Version: 10.2.3

Model: Firewall 3440

Software Version: 10.2.3

Re: Rollback Multi Virtual System Capability tick box on the Firewall.

JayGolf — Wed, 16 Aug 2023 07:42:36 GMT

HI @SachinGargNTT ,

Deleting a vsys and Unchecking the multi-vsys capability will only cause issues if you currently have traffic managed by that vsys. It sounds like you haven't configured any vsys-specific config so there will be no impact to unchecking the multi-vsys capability.

I would review the commit log and remediate any errors that you have. If you are experiencing difficulties, I would recommend doing one thing at a time. Commit the unchecking of the multi-vsys capability and then apply the necessary policy changes.

Re: Rollback Multi Virtual System Capability tick box on the Firewall.

BPry — Wed, 16 Aug 2023 13:22:32 GMT

@SachinGargNTT,

Have you gone through on the Panorama side of things and ensured that you have removed any reference? https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaFCAS