Cannot delete Azure Firewall and Policy

GRAY Mike 161 Reputation points
2022-02-08T18:19:57.363+00:00

Hi,

I have been trying to remove the FW from my subscription but neither the FW or the Policy will allow me to remove. I set these up for studying purposes and now they have used all my MSDN Azure budget. The error I am getting is as follows...

Failed to delete the Azure Firewall 'AzFW01'. Error: Azure Firewall AzFW01 failed to dereference Firewall Policy.

When I try to delete the policy I get the prompt policy cannot be deleted as the FW is using it.

Could someone please advise

Mike

Azure Firewall
Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
574 questions
0 comments

4 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Kenny Abdiel Maita 5 Reputation points
    2023-05-18T14:09:51.5966667+00:00

    Hi,

    Disabled subscriptions become Read-only subscriptions, so you won't be able to do anything until the credit is reset.

    As per documentation:

    "When you reach the monthly cap for your credits, your Azure services will stop until your next monthly credits are added unless you choose to remove the spending cap by upgrading to pay-as-you-go pricing."

    Your subscription is re-enabled automatically at the beginning of the next billing period and you will have enough credits to remove/delete/deallocate/rethink and adjust your workload. You should hurry to remediate the situation to avoid reaching your monthly cap again before fixing the issue.

    Previous balances won't accrue to the next month.

    If this is useful, please mark it as an answer.

    Thank you

    1 person found this answer helpful.
    0 comments
  2. ChaitanyaNaykodi-MSFT 23,031 Reputation points Microsoft Employee
    2022-02-08T22:46:39.42+00:00

    Hello @GRAY Mike ,

    Based on the error received above, I think you will have to remove the Firewall policy associated with the Firewall first and then try deleting them both.

    You can follow the steps mentioned below to remove the firewall policy association.

    • Enter Firewall Manger (click on Azure Firewall Manager)
      List item
    • On Azure Firewall Manager page click on Azure Firewall Policies

    172229-image.png

    • Then select the Firewall policy you want to disassociate and click on Mange Associations

    172350-image.png

    • Click on the appropriate option. In my case it was Remove Vnet Associations. Then click on confirm to remove the firewall association List item

    Hope this helps! Please let me know if this does not help resolve the issue. Thank you!

    0 comments
  3. GRAY Mike 161 Reputation points
    2022-02-09T09:13:47.747+00:00

    Hi,

    This is an MSDN subscription so my spend limit has now been reached and the account has been disabled. So I am not sure whether I can remove or not.

    What do you advise?

    Thanks

    Mike

  4. Robert Smit 1 Reputation point MVP
    2022-03-07T17:39:39.077+00:00

    Please notice that you are deleting the standard Policy as the premium cost the most, and If you want to play with the firewall policys you don't need a firewall you can also delete the firewall and keep te policy's when you want to test the firewall or setup then redeploy the Firewall, or export the JSON to backup the entire policy and a quick redeploy when it is needed again. that way you will save some credits on the msdn account. https://robertsmit.wordpress.com/2022/02/24/backup-azure-firewall-with-virtual-wan-azure-sdwan-backup-runbook/

    0 comments