Delete VSYS configuration

[Vaibhav]

I have a VSYS on my PA-5050 which is no more required and needs to be deleted.

What steps needs to be taken for this?

Is it unassigning all the interfaces in that , deleting all policies etc or do we have a proper step by step thing for this?

Thanks all in advance

Regards

Vaibhav

[HULK · Accepted solution]

Hello Vaibhav,

There is no specific step you need to follow for the same. Just need to delete the VSYS under Device >> Virtual System and you are correct, it will unassign all the interfaces in that , deleting all policies etc.

Thanks

[Vaibhav]

Hello Hulk,

Thanks for the reply.

I was thinking for the same, but would it allow me to delete the VSYS without un assigning the interface. It was the case with Juniper but i am not sure of Palo Alto.

Thanks

Vaibhav

[HULK]

Hello Vaibhav,

Once you will delete a VSYS from PAN firewall, It will un-assign the VSYS information from the interface-configuration automatically. As per my knowledge, In case of Juniper SRX firewall, you need to manually un-assign the same settings individually from interfaces.

Hope this helps.

Thanks

[Vaibhav]

Thanks Hulk.

I am going to try this thing now.

[Alex_Graser]

I want to share my experience deleting a vsys, because i just did so this morning:

My PAN-OS-Version is 7.1.12 and I deleted one of my three vsys.

First, I followd the instruction mentioned in the above posts - just deleting the vsys. After deleting the vsys - there were no errors - I commited the changes. This commit failed because of configured Ipsec-Tunnels and GP-Gateways.

I had to revert to running-config, because the Information about GP-Gateways seemd to be lost.

After revert to running-config - which restored the original config with the vsys deleted before - I first removed all IPSec-tunnels, GP-Gateways and Tunnel-Interfaces which were referenced by those IPsec-tunnels an GP-Gateways.

After that I deleted the vsys, followed by a commit. this time the commit was compelted without any errors.

After that I saw that the virtual-router-instance of the vsys I just deleted, was not deleted. So I removed it manually.

Also, the Interfaces used in the vsys which I deleted, needed some manual intervention. I used some sub-interfaces, in this vsys, so I delted them. Physical Interfaces which were used in this vsys had IP-Address-Config, so I removed them also.

After that everthing seems to be removed.

Maybe this information is useful for someone.

Greetings,

Alex.

[assubramania]

After deleting unused vsys (vsys3) we are receiving failed commits to device, the vsys has been removed and the device removed from the device group however the local device is still showing configuration that should have been removed - policy, interfaces and vr.

Please suggest what i should do