I have a problem deleting a rule that was created on Pan-OS via Panorama.

I have Pan-OS firewall (5.0.0) that was managed by Panorama (5.0.0), then I added the Pan-OS to a DG and created some rules. after a while someone deleted the DG and committed to the Panorama.

Now I have a Pan-OS firewall with a DG rule that I can't remove.

Does someone know how to remove a Panorama rule from Pan-OS?

  • I think in the lower left hand view you can delete the rule there. Should be a delete button. – Ronnie Royston Jan 24 '17 at 5:44
  • Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you could provide and accept your own answer. – Ron Maupin Feb 21 '18 at 16:42

To remove Panorama rule from Panos. Select the rule and below click on override on firewall and delete the rule. Commit and save changes on that particular box. What is DG?

| improve this answer | |

When you commit in Panorama, select the "Device Group" radio button. There should be a checkbox on the bottom right that says "Force Template Values". I am wondering if you force the template values for the Device Group whether you will delete the rules from the PanOS.

You could also recreate the Device Group and add just this PanOS to the group and commit to see if the policies go away. Then commit again deleting the Device Group.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.