⋮ menu and asks for a one-click confirmation — there’s no soft-delete or recovery window. Use this when a group’s no longer needed (decommissioned service, retired environment, replaced by a different group).
Before you delete
1. Open the row menu
In Networking → Firewall, find the group’s row in Your Firewall Groups and click the⋮ on the right.
The menu has three actions on a Custom group: Edit Rules, Assign to VM, and Delete (red). Click Delete.
2. Confirm the delete
<group-name>? This action cannot be undone.”
Click the red Delete to proceed, or Cancel to back out.
What happens after delete
When delete is blocked
If the menu item shows the Delete action greyed or the confirmation refuses to proceed:Replacing a Firewall Group instead of deleting
To replace one group with another (e.g. swapweb-prod-v1 for web-prod-v2 on a fleet of VMs):
- Create the replacement group with the new rule set
- Attach the replacement to every VM that has the old group. It replaces the old group on that IP in about 20 seconds, with no restart. The new group goes on before the old one comes off, so no VM is left without a firewall
- Delete the old group (now unattached, the Delete action is unblocked)
What you cannot do today
- Recover a deleted Firewall Group — once deleted, it’s gone. Recreate from scratch
- Bulk-delete groups — one at a time from the row menu (or via the API)
- Delete the Default Firewall — system Default is immutable
- Schedule a delete for later — delete is immediate
Related
Update rules
Edit a group instead of deleting it.
Attach to a VM
Detach a group as the prerequisite to deleting.
Inbound vs outbound
The model behind the rules you’re deleting.