topic Re: Removing VS after deleting its domain (MDS / VSX) in Firewall and Security Management

Removing VS after deleting its domain (MDS / VSX)

denbug — Thu, 23 Oct 2025 09:01:33 GMT

Hi CheckMates

I'm working in an MDS environment built with a VSX structure.

I had to delete a domain along with its Virtual System (VS), but unfortunately, I deleted the domain first — before removing the VS associated with it.

Now, when I run vsx stat -v, I can still see the VS listed from VS0.

What’s the best way to remove this leftover VS?

Thanks in advance!

Re: Removing VS after deleting its domain (MDS / VSX)

the_rock — Thu, 23 Oct 2025 15:11:44 GMT

Guidbedit?

Re: Removing VS after deleting its domain (MDS / VSX)

Bob_Zimmerman — Thu, 23 Oct 2025 15:40:47 GMT

I don't think that would help. It can only edit the config on the management, and the VS is no longer present on the management.

Definitely try anything in a lab at least three times before doing it on the live system. Take snapshots of everything so you can at least get back to the state you're in right now.

I think you probably need to reprovision the cluster members. Reset the SIC key in cpconfig, then use 'vsx_util reconfigure' on the management to reestablish SIC and push the VS config to the member. Repeat for each member of the cluster. Remember dynamic routing config needs to be done in clish after the VSs have been built. I'm not sure if rebuilding VSs in this way will wipe it, so assume it will.

Re: Removing VS after deleting its domain (MDS / VSX)

the_rock — Thu, 23 Oct 2025 15:45:06 GMT

Makes sense.

Re: Removing VS after deleting its domain (MDS / VSX)

denbug — Thu, 23 Oct 2025 17:52:57 GMT

I will differently run it in a testlab before hand.

Thank you for the response.

Re: Removing VS after deleting its domain (MDS / VSX)

the_rock — Thu, 23 Oct 2025 18:05:03 GMT

100% safer.

Re: Removing VS after deleting its domain (MDS / VSX)

the_rock — Thu, 23 Oct 2025 18:11:30 GMT

Also, might be worth contacting Professional services.

Re: Removing VS after deleting its domain (MDS / VSX)

denbug — Thu, 23 Oct 2025 19:34:07 GMT

I did reach out to TAC. They recommend using 'vsx_util reconfigure'.
Thank you for help 🙂

Re: Removing VS after deleting its domain (MDS / VSX)

the_rock — Thu, 23 Oct 2025 19:47:38 GMT

Thats probably safest option.

Re: Removing VS after deleting its domain (MDS / VSX)

CheckPointerXL — Thu, 23 Oct 2025 21:55:48 GMT

that's something suggested only into clean installed gateway... am i wrong?

Re: Removing VS after deleting its domain (MDS / VSX)

the_rock — Thu, 23 Oct 2025 22:28:01 GMT

I dont believe so.

Re: Removing VS after deleting its domain (MDS / VSX)

CheckPointerXL — Fri, 24 Oct 2025 07:31:08 GMT

https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_VSX_AdminGuide/Content/Topics-VSXG/CLI/vsx_util-reconfigure.htm

Re: Removing VS after deleting its domain (MDS / VSX)

emmap — Fri, 24 Oct 2025 07:42:29 GMT

Yes, it's for a clean installed gateway. You'd have to 'reset_gw' on the VSX gateway first to clean all the VSX config off it, then you can 'vsx_util reconfigure' it back out from the mgmt server. Make sure you have any custom per VS clish configuration saved somewhere off the box before doing this.