- Products
- Learn
- Local User Groups
- Partners
- More
The State of Ransomware Q1 2026
Key Trends and Their Impact
Good, Better, Best:
Prioritizing Defenses Against Credential Abuse
AI Security Masters E7:
How CPR Broke ChatGPT's Isolation and What It Means for You
Blueprint Architecture for Securing
The AI Factory & AI Data Center
Call For Papers
Your Expertise. Our Stage
CheckMates Go:
CheckMates Fest
Hi CheckMates
I'm working in an MDS environment built with a VSX structure.
I had to delete a domain along with its Virtual System (VS), but unfortunately, I deleted the domain first — before removing the VS associated with it.
Now, when I run vsx stat -v, I can still see the VS listed from VS0.
What’s the best way to remove this leftover VS?
Thanks in advance!
I did reach out to TAC. They recommend using 'vsx_util reconfigure'.
Thank you for help 🙂
Yes, it's for a clean installed gateway. You'd have to 'reset_gw' on the VSX gateway first to clean all the VSX config off it, then you can 'vsx_util reconfigure' it back out from the mgmt server. Make sure you have any custom per VS clish configuration saved somewhere off the box before doing this.
Guidbedit?
I don't think that would help. It can only edit the config on the management, and the VS is no longer present on the management.
Definitely try anything in a lab at least three times before doing it on the live system. Take snapshots of everything so you can at least get back to the state you're in right now.
I think you probably need to reprovision the cluster members. Reset the SIC key in cpconfig, then use 'vsx_util reconfigure' on the management to reestablish SIC and push the VS config to the member. Repeat for each member of the cluster. Remember dynamic routing config needs to be done in clish after the VSs have been built. I'm not sure if rebuilding VSs in this way will wipe it, so assume it will.
Makes sense.
I will differently run it in a testlab before hand.
Thank you for the response.
100% safer.
Also, might be worth contacting Professional services.
I did reach out to TAC. They recommend using 'vsx_util reconfigure'.
Thank you for help 🙂
Thats probably safest option.
that's something suggested only into clean installed gateway... am i wrong?
I dont believe so.
Yes, it's for a clean installed gateway. You'd have to 'reset_gw' on the VSX gateway first to clean all the VSX config off it, then you can 'vsx_util reconfigure' it back out from the mgmt server. Make sure you have any custom per VS clish configuration saved somewhere off the box before doing this.
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
| User | Count |
|---|---|
| 33 | |
| 10 | |
| 10 | |
| 9 | |
| 9 | |
| 7 | |
| 7 | |
| 6 | |
| 6 | |
| 6 |
Tue 12 May 2026 @ 10:00 AM (CEST)
The Cloud Architects Series: Check Point Cloud Firewall delivered as a serviceWed 13 May 2026 @ 11:00 AM (EDT)
TechTalk: The State of Ransomware Q1 2026: Key Trends and Their ImpactThu 14 May 2026 @ 07:00 PM (EEST)
Under the Hood: Presentando Check Point Cloud Firewall como ServicioTue 12 May 2026 @ 10:00 AM (CEST)
The Cloud Architects Series: Check Point Cloud Firewall delivered as a serviceAbout CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY