Detach a VPC from a firewall

Detaching a VPC takes the firewall out of that network. The VPC itself stays, with everything else in it. A firewall always keeps at least one VPC: you can detach any VPC, including the one you picked when you created it, while the firewall has two or more.

Before you begin

• The firewall has at least two VPCs. To move a firewall to a new VPC, attach the new one first. See Attach a VPC to a firewall.
• The firewall is Running or Powered off, and unlocked.
• Your role has both the update and the create Firewall permissions. Update shows +, Attach VPC, and the cancel icon, and create lets MyAccount make the change. If a control is missing or the change fails, ask your account’s administrator to add both to your role.
• You have moved any traffic you still need off that VPC’s path through the firewall. Traffic between that VPC and the firewall stops once you detach it.

Detach the VPC

1. In MyAccount, under Network, click Firewall.
2. On Manage Firewall, click the firewall, then its Network tab.
3. Under Associated VPC name, click the cancel icon next to the VPC’s name.
4. In Detach VPC, which asks Are you sure you want to detach VPC: , click Detach VPC.

VPC detach operation successfully done confirms it.

If one of these shows instead, the VPC stays attached:

• At least one VPC is required on a firewall. Please attach a new VPC before removing this one.: attach another VPC first.
• VPC cannot be attach/detach in Locked State.: choose Unlock Firewall first.
• This action can be perform only on RUNNING/ POWEROFF: wait until the firewall is Running or Powered off.
• The node is currently updating its VPC information. Please try again in a few moments.: try again in a few minutes.

For help with any message, see I cannot attach or detach a VPC.

Check the VPC is detached

On the firewall’s Network tab, the VPC is gone from Associated VPC name.

Next, remove the policies and routes for that network on the FortiGate’s screen. See Sign in to the FortiGate.