Rollback Multi Virtual System Capability tick box on the Firewall.

[SachinGargNTT]

Hi team,

Can you help me with an issue that has occurred.  We were on the process of adding an extra vsys on our firewall when we realized that this model of firewall requires a license for it to be activated.

Since there was no license, we have reversed all the changes except the Multi Virtual System Capability tick box on the firewall. 

So, we have two issue need answer for.

1. Will unchecking Multi Virtual System Capability tick box on the firewall (ie;Rollback) cause any issue ?

2. After we rolled back the config except Multi Virtual System Capability tick box on the firewall, we are facing policy push issue. (ie; We are able to commit changes to the firewall successfully, however policy changes are not appearing on the firewall despite a successful commit.)

Model:Panorama

VM Mode:ESxi

Software Version: 10.2.3

Model: Firewall 3440

Software Version: 10.2.3

[JayGolf]

HI @SachinGargNTT ,

Deleting a vsys and Unchecking the multi-vsys capability will only cause issues if you currently have traffic managed by that vsys. It sounds like you haven't configured any vsys-specific config so there will be no impact to unchecking the multi-vsys capability.

I would review the commit log and remediate any errors that you have. If you are experiencing difficulties, I would recommend doing one thing at a time. Commit the unchecking of the multi-vsys capability and then apply the necessary policy changes. 

[BPry]

@SachinGargNTT,

Have you gone through on the Panorama side of things and ensured that you have removed any reference? https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaFCAS