How to delete vsys and its associated objects on the Firewall and Panorama
Step 1. On Panorama, remove references of objects (configured under Device Groups) from Template.
Example: Reference of Logforwarding Profile in Zones. Set the log forwarding profile to None.
Step 2. Commit this on Panorma and commit to the Managed Firewall.
Step 3. Delete contents of the Device Group and commit the empty device group to the Panorama and Managed Firewall.
Step 4. Delete Template entries like interface zones etc and commit to Panoram and Template on the Managed Firewall.
Step 5. Remove the Device Group from Shared policy and commit on Panorama.
Note: Use "Target to all but these specified devices" and check the Device Group you would like to remove.
Step 6: Commit to the Device Group to remove references of Shared policy pushed from Device Group on the Managed Firewall.
Step 7. Delete the vsys from Template on Panorama and commit on Panorama and Device Group (Managed Firewall)
Step 8. Delete the template from Panorama and commit.