--- title: "Detach a VPC from a firewall" description: "Detach a VPC from an E2E Firewall on its Network tab, including the VPC picked at creation, while the firewall keeps at least one VPC." content_type: "how-to" product: "firewall" platform: "MyAccount" url: "/myaccount/firewall/how-to/detach-a-vpc-from-a-firewall/" topic: ["network"] relationships: {"requires":["/myaccount/firewall/how-to/attach-a-vpc-to-a-firewall/"]} --- # Detach a VPC from a firewall Detaching a VPC takes the firewall out of that network. The VPC itself stays, with everything else in it. A firewall always keeps at least one VPC: you can detach any VPC, including the one you picked when you created it, while the firewall has two or more. ## Before you begin - The firewall has at least two VPCs. To move a firewall to a new VPC, attach the new one first. See [Attach a VPC to a firewall](/myaccount/firewall/how-to/attach-a-vpc-to-a-firewall/). - The firewall is **Running** or **Powered off**, and unlocked. - Your role has both the update and the create Firewall permissions. Update shows **+**, **Attach VPC**, and the cancel icon, and create lets MyAccount make the change. If a control is missing or the change fails, ask your account's administrator to add both to your role. - You have moved any traffic you still need off that VPC's path through the firewall. Traffic between that VPC and the firewall stops once you detach it. ## Detach the VPC 1. In MyAccount, under **Network**, click **Firewall**. 2. On **Manage Firewall**, click the firewall, then its **Network** tab. 3. Under **Associated VPC name**, click the cancel icon next to the VPC's name. 4. In **Detach VPC**, which asks **Are you sure you want to detach VPC: **, click **Detach VPC**. **VPC detach operation successfully done** confirms it. If one of these shows instead, the VPC stays attached: - **At least one VPC is required on a firewall. Please attach a new VPC before removing this one.**: attach another VPC first. - **VPC cannot be attach/detach in Locked State.**: choose **Unlock Firewall** first. - **This action can be perform only on RUNNING/ POWEROFF**: wait until the firewall is **Running** or **Powered off**. - **The node is currently updating its VPC information. Please try again in a few moments.**: try again in a few minutes. For help with any message, see [I cannot attach or detach a VPC](/myaccount/firewall/troubleshooting/firewall/#i-cannot-attach-or-detach-a-vpc). ## Check the VPC is detached On the firewall's **Network** tab, the VPC is gone from **Associated VPC name**. Next, remove the policies and routes for that network on the FortiGate's screen. See [Sign in to the FortiGate](/myaccount/firewall/how-to/sign-in-to-the-fortigate/).