- Products
- Learn
- Local User Groups
- Partners
- More
Stop Babysitting Rules.
Go Agentic
Step Into the Future of
AI-Powered Cyber Security
The State of Ransomware Q1 2026
Key Trends and Their Impact
AI Security Masters E8:
Claude Mythos: New Era in Cyber Security
Blueprint Architecture for Securing
The AI Factory & AI Data Center
Call For Papers
Your Expertise. Our Stage
CheckMates Go:
CheckMates Fest
Hi CheckMates
I'm working in an MDS environment built with a VSX structure.
I had to delete a domain along with its Virtual System (VS), but unfortunately, I deleted the domain first — before removing the VS associated with it.
Now, when I run vsx stat -v, I can still see the VS listed from VS0.
What’s the best way to remove this leftover VS?
Thanks in advance!
I did reach out to TAC. They recommend using 'vsx_util reconfigure'.
Thank you for help 🙂
Yes, it's for a clean installed gateway. You'd have to 'reset_gw' on the VSX gateway first to clean all the VSX config off it, then you can 'vsx_util reconfigure' it back out from the mgmt server. Make sure you have any custom per VS clish configuration saved somewhere off the box before doing this.
Guidbedit?
I don't think that would help. It can only edit the config on the management, and the VS is no longer present on the management.
Definitely try anything in a lab at least three times before doing it on the live system. Take snapshots of everything so you can at least get back to the state you're in right now.
I think you probably need to reprovision the cluster members. Reset the SIC key in cpconfig, then use 'vsx_util reconfigure' on the management to reestablish SIC and push the VS config to the member. Repeat for each member of the cluster. Remember dynamic routing config needs to be done in clish after the VSs have been built. I'm not sure if rebuilding VSs in this way will wipe it, so assume it will.
Makes sense.
I will differently run it in a testlab before hand.
Thank you for the response.
100% safer.
Also, might be worth contacting Professional services.
I did reach out to TAC. They recommend using 'vsx_util reconfigure'.
Thank you for help 🙂
Thats probably safest option.
that's something suggested only into clean installed gateway... am i wrong?
I dont believe so.
Yes, it's for a clean installed gateway. You'd have to 'reset_gw' on the VSX gateway first to clean all the VSX config off it, then you can 'vsx_util reconfigure' it back out from the mgmt server. Make sure you have any custom per VS clish configuration saved somewhere off the box before doing this.
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
| User | Count |
|---|---|
| 20 | |
| 19 | |
| 9 | |
| 9 | |
| 8 | |
| 7 | |
| 6 | |
| 5 | |
| 4 | |
| 4 |
Fri 29 May 2026 @ 09:00 AM (EDT)
Caracas: Executive Breakfast: Innovación en Ciberseguridad – IA y Threat IntelligenceTue 02 Jun 2026 @ 10:00 AM (AEST)
The Cloud Architect Series: Check Point WAF. The next generation of AI-Powered Protection - APACTue 02 Jun 2026 @ 06:00 PM (IDT)
Under the Hood | Check Point SASE: Identity Integration & Access Policy Design Best PracticesTue 02 Jun 2026 @ 10:00 AM (AEST)
The Cloud Architect Series: Check Point WAF. The next generation of AI-Powered Protection - APACTue 02 Jun 2026 @ 06:00 PM (IDT)
Under the Hood | Check Point SASE: Identity Integration & Access Policy Design Best PracticesThu 04 Jun 2026 @ 02:00 PM (CEST)
Deep Dive Webinar: New CloudGuard GWLB Deployment Without NAT Gateways - EuropeThu 04 Jun 2026 @ 07:00 PM (IDT)
Deep Dive Webinar: New CloudGuard GWLB Deployment Without NAT Gateways - AmericaFri 29 May 2026 @ 09:00 AM (EDT)
Caracas: Executive Breakfast: Innovación en Ciberseguridad – IA y Threat IntelligenceAbout CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY