- Products
- Learn
- Local User Groups
- Partners
- More
Access Control and Threat Prevention Best Practices
5 November @ 5pm CET / 11am ET
Firewall Uptime, Reimagined
How AIOps Simplifies Operations and Prevents Outages
Overlap in Security Validation
Help us to understand your needs better
CheckMates Go:
Spark Management Portal and More!
Hi CheckMates
I'm working in an MDS environment built with a VSX structure.
I had to delete a domain along with its Virtual System (VS), but unfortunately, I deleted the domain first — before removing the VS associated with it.
Now, when I run vsx stat -v, I can still see the VS listed from VS0.
What’s the best way to remove this leftover VS?
Thanks in advance!
I did reach out to TAC. They recommend using 'vsx_util reconfigure'. 
Thank you for help 🙂
Yes, it's for a clean installed gateway. You'd have to 'reset_gw' on the VSX gateway first to clean all the VSX config off it, then you can 'vsx_util reconfigure' it back out from the mgmt server. Make sure you have any custom per VS clish configuration saved somewhere off the box before doing this.
Guidbedit?
I don't think that would help. It can only edit the config on the management, and the VS is no longer present on the management.
Definitely try anything in a lab at least three times before doing it on the live system. Take snapshots of everything so you can at least get back to the state you're in right now.
I think you probably need to reprovision the cluster members. Reset the SIC key in cpconfig, then use 'vsx_util reconfigure' on the management to reestablish SIC and push the VS config to the member. Repeat for each member of the cluster. Remember dynamic routing config needs to be done in clish after the VSs have been built. I'm not sure if rebuilding VSs in this way will wipe it, so assume it will.
Makes sense.
I will differently run it in a testlab before hand. 
Thank you for the response.
100% safer.
Also, might be worth contacting Professional services.
I did reach out to TAC. They recommend using 'vsx_util reconfigure'. 
Thank you for help 🙂
Thats probably safest option.
that's something suggested only into clean installed gateway... am i wrong?
I dont believe so.
Yes, it's for a clean installed gateway. You'd have to 'reset_gw' on the VSX gateway first to clean all the VSX config off it, then you can 'vsx_util reconfigure' it back out from the mgmt server. Make sure you have any custom per VS clish configuration saved somewhere off the box before doing this.
 
					
				
				
			
		
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
| User | Count | 
|---|---|
| 23 | |
| 21 | |
| 11 | |
| 9 | |
| 9 | |
| 7 | |
| 7 | |
| 7 | |
| 7 | |
| 5 | 
Wed 05 Nov 2025 @ 11:00 AM (EST)
TechTalk: Access Control and Threat Prevention Best PracticesThu 06 Nov 2025 @ 10:00 AM (CET)
CheckMates Live BeLux: Get to Know Veriti – What It Is, What It Does, and Why It MattersTue 11 Nov 2025 @ 05:00 PM (CET)
Hacking LLM Applications: latest research and insights from our LLM pen testing projects - AMERTue 11 Nov 2025 @ 10:00 AM (CST)
Hacking LLM Applications: latest research and insights from our LLM pen testing projects - EMEAAbout CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY