Failure to Commit changes in Panorama after removing a firewall as managed device

[popeja]

I removed a firewall that is managed through Panorama by going to Panorama > Managed Devices > Summary, selecting my firewall then selecting delete. This removed the firewall for me succesfully. However, when I go to make a Commit in Panorama it throws an error saying 

When I search for that serial number in Panorama it sure enough comes up on a couple of my QoS policies as a target device. I can even see the serial number listed as a target device on the summary of the policy. However, when I open the Policy and go to the Targets tab, it's not listed anywhere to remove it.

Has anyone ran into this problem before and have a solution or any ideas I can try?

Thanks!

[PavelK]

Thank you for the post @popeja

Could you make sure that managed Firewall was removed from below configurations:

- Panorama > Device Groups > Then navigate to Device Group: Branch_Single-Homed, then deselect Firewall from Device Group.

In addition, to properly remove managed Firewall from Panorama, I would recommend remove it from below sections:

- Panorama > Templates > Then navigate to Template Stack where Firewall is located, then deselect Firewall from Template Stack.

-  Panorama > Collector Group > [Collector Group Name] > Device Log Forwarding > Log Forwarding Preferences > Modify > Then deselect Firewall. This option is relevant if you collect logs from managed Firewall.

- Panorama > Device Deployment > Dynamic Updates > Schedules > [Scheduler Name] > Then deselect Firewall. This option is relevant if you install updates from Panorama to managed Firewall.

After you complete all these steps, there should be nothing left preventing you to commit it.

Kind Regards

Pavel

[popeja]

Thanks the for the reply PavelK. I should have mentioned that I've remove the firewall from all these already. No luck.

[popeja · Accepted solution]

I was able to get around this issue by adding that serial number back as a managed device. Next I re-added it to the device group. Then removing this serial number from the dynamic updates schedule like Pavel said and I was also able to see this in the QoS policies again to remove there. 

My commit finally completed successfully.