How to remove disconnected firewall from Panorama

[rwolsen]

We have a Panorama that still has the configuration for a Firewall that was removed. I have tried going through other posts and pages to remove it and it is not working.
So far i have dropped it from Collector Group and Templates. But when i try to remove the Managed device from the summary i get the following message

1-Failed to delete Managed Devices <SN>

<SN> cannot be deleted because of references from:
device-group -> Managed -> devices -> <SN>

How do I remove the device from device-group?

[BPry · Accepted solution]

@rwolsen,

If you go under the panorama tab there's a 'Device Groups' tab which you'll want to visit and actually remove the device from the 'Managed' group. Then you'll be able to actually remove the device under Summary.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cmd6CAC

[rwolsen]

I was trying to remove a single entry in the shared Device group. Once i deleted the whole group i was able to remove the missing FW. I then re-created the device group without the missing FW.  I was then able to commit, well after i had to open each rule that had the missing fw listed as a target. 

Thanks. 

[Steve_Dussault]

In some cases it may be necessary to export the configuration and remove the entries for the troublesome firewall from the XML and then reimport the configuration back into Panorama.

HTH

[1daveg1]

what they don't say is that to "delete from Templates" you go to Templates and uncheck the firewall you wish to delete, then click OK. No Delete button.

Then to to Device Groups and uncheck the firewall there too.

Then back to Managed Devices and your firewall should now be in a separate unassociated group where you can finally check the box and then choose Delete

[ramcardenas]

This was the answer I needed. I just need to remove devices from Device Groups and Templates so that I can delete the firewall from the Managed Devices Summary.