set readonly commands

[luchette]

Found a bunch of config lines as such. Where/how? Can't delete them. They don't appear in the GUI. 

set readonly device-group grpname address-group NAME_LAN_GRP id 289
set readonly device-group grpname address-group NAME_LAN_GRP id 290
set readonly device-group grpname address-group NAME_LAN_GRP id 291
set readonly device-group grpname address-group NAME_LAN_GRP id 301
set readonly device-group grpname address-group NAME_LAN_GRP id 371
set readonly device-group grpname address-group NAME_LAN_GRP id 377
set readonly shared address-group NAME_LAN_GRP id 288

[reaper]

Those are panorama pushed, where the panorama admin disabled override

You need to edit those through panorama

[luchette]

I'm in Panorama and still can't delete:

admin@panorama(primary-active)# delete device-group 3PS2S address-group NAME_LAN_GRP

Object doesn't exist

In the Panorama GUI as admin, a search for this object returns nothing.

[reaper]

Is it possible that your firewall has been connected to a different panorama, or objects were removed from panorama and never committed somehow...