What Are The Reasons Why We Still Can't Remove the vWire via Panorama On A New Firewall

[SirchRettop]

Hi guys,

What is the reason?

A brand new firewall from the factory, we give it a management ip-address and panorama server address, we import the firewall config to Panorama and commit to Panorama.

We then change the network and device templates so that we the ethernet1/1 and 1/2 become layer 3.

When we try to push this config to the firewall it fails

Is this normal behaviour?

Can you really not change the default config via Panorama.

You need to log in to each firewall if its a large deployment and delete the vWire and associated interfaces?

[MP18]

@SirchRettop 

Please go through below url link

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000boNjCAI

Regards

[SirchRettop]

Hey guys,

Yes I had a look at this article but thing is, we only have connections to the devices via Panorama for the moment.
We don't have options for "technical hands" onsite to assist with removing the default config

[MP18]

@SirchRettop 

You need to access this firewall via Panorama and then delete the default vwire configuration via 

On the managed firewall, delete the default-vwire configuration under Network > Virtual Wires.

Regards

[SirchRettop]

Very cool.

Yes, I was able to access the firewall via the context switch and delete the vWires that way.

Phew!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Thanks for reaching out