topic Re: What Are The Reasons Why We Still Can't Remove the vWire via Panorama On A New Firewall in General Topics

What Are The Reasons Why We Still Can't Remove the vWire via Panorama On A New Firewall

SirchRettop — Fri, 19 Mar 2021 19:15:12 GMT

Hi guys,

What is the reason?

A brand new firewall from the factory, we give it a management ip-address and panorama server address, we import the firewall config to Panorama and commit to Panorama.

We then change the network and device templates so that we the ethernet1/1 and 1/2 become layer 3.

When we try to push this config to the firewall it fails

Is this normal behaviour?

Can you really not change the default config via Panorama.

You need to log in to each firewall if its a large deployment and delete the vWire and associated interfaces?

Re: What Are The Reasons Why We Still Can't Remove the vWire via Panorama On A New Firewall

MP18 — Sat, 20 Mar 2021 03:06:54 GMT

@SirchRettop

Please go through below url link

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000boNjCAI

Regards

Re: What Are The Reasons Why We Still Can't Remove the vWire via Panorama On A New Firewall

SirchRettop — Sat, 20 Mar 2021 14:12:21 GMT

Hey guys,

Yes I had a look at this article but thing is, we only have connections to the devices via Panorama for the moment.
We don't have options for "technical hands" onsite to assist with removing the default config

Re: What Are The Reasons Why We Still Can't Remove the vWire via Panorama On A New Firewall

MP18 — Sat, 20 Mar 2021 18:12:46 GMT

@SirchRettop

You need to access this firewall via Panorama and then delete the default vwire configuration via

On the managed firewall, delete the default-vwire configuration under Network > Virtual Wires.

Regards

Re: What Are The Reasons Why We Still Can't Remove the vWire via Panorama On A New Firewall

SirchRettop — Mon, 22 Mar 2021 13:45:17 GMT

Very cool.

Yes, I was able to access the firewall via the context switch and delete the vWires that way.

Phew!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Thanks for reaching out