Cannot delete group because in use by a firewall rule

Hi,

Unfortunately, there is no tool to check that. You need to verify manually in which Firewall Rule is the Group in use. 

Thanks

Hi Sachin,

as I'm not able to remove the group, despite I removed it from any location I could find it, could you be so kind to completely enumerate the contexts in which a goup could be referenced? If integrity of relations between rules and identities inside the XG configuration is inconsistent, should I reset the XG to defaults?

Thx

This is a big problem when you are using XG in big installation where more than 1000 objects have been created and you cannot delete them. In UTM if you delete an object, a warning will advice you where the object is used before delete operation.

Do we need to open a feature request for it?

Thanks.

I forgot that an opened feature request exists:

http://feature.astaro.com/forums/330219-sophos-xg-firewall/suggestions/10812132-force-delete-object

Vote it!

I had this annoying issue as well. I managed to fix it by going through all my rules and turning on "Match known users". This allows you to see if you have previously assigned a user to a rule. If you untick "Match known users" after assigning a user, the rule will simply remove this user from it's logic but it's still attached to the rule, hence the inability to delete the user. Once you have "Match known users" turn on, you can remove the affected user by assigning the Any user to replace the user you want to delete.  

Managing multiple rules and filters is a nigthmare when you need to delete an object. On UTM9 was easy to find where the object was used and the option to enforce the removal was great.

They have to integrate it soon.

This is really quite cumbersome to perform this every time a user needs to be removed.  Has anyone discovered a better way to work around this issue or is there a case # that can be referenced?