Subscription Disabled - Unable to delete Azure Firewall

Ahmed 6 Reputation points
2021-06-29T10:59:01.06+00:00

Hi everyone,

I have a free visual studio MSDN subscription, with $115/month credit. I deployed Azure Firewall 3 months ago and I now accrued costs over my budget (negative balance). So my subscription is now disabled.

Due to my subscription being disabled I am unable to delete the Azure Firewall and it's associated resources (vnet, subnet, Public IP, Firewall Policy Manager). The subscription costs is currently at $900 so I need to urgently find a way to delete the firewall so I can use the subscription again.

I get this error code when deleting the Az Firewall:
AzfwADeleteFromFirewallPolicyFailed

I have tried the start/stop script: https://learn.microsoft.com/en-gb/azure/firewall/firewall-faq?WT.mc_id=Portal-Microsoft_Azure_Support#how-can-i-stop-and-start-azure-firewall

But it has failed because my write access is disabled because my subscription is disabled....

And I can't disassociate anything that is connected to the Firewall because I don't have write access.

Is anyone able to help with this catch 22 issue?

Many thanks,

Azure Firewall
Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
564 questions
Azure Cost Management
Azure Cost Management
A Microsoft offering that enables tracking of cloud usage and expenditures for Azure and other cloud providers.
2,008 questions
Azure Firewall Manager
Azure Firewall Manager
An Azure service that provides central network security policy and route management for globally distributed, software-defined perimeters.
82 questions
0 comments

3 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. TravisCragg-MSFT 5,676 Reputation points Microsoft Employee
    2021-06-30T01:03:00.71+00:00

    Your best bet is to create a support request with Azure Billing & Subscription. Billing requests do not require a support plan, and you should be able to work with someone to get the subscription temporarily re-enabled so you can delete the resources / cancel the subscription.

    If for some reason you are unable to create the support request, please let me know and I can make sure one gets opened on that subscription.

    1 person found this answer helpful.
  2. Vinh Tung Le 1 Reputation point
    2022-03-31T04:18:37.857+00:00

    Hi @TravisCragg-MSFT ,

    I got the same issue here when my MPN subscription is being disabled by overusing Azure Firewall. I tried to delete the firewall but it requires me to delete or disassociate the firewall policy before that. I then went to delete the firewall policy but I was told that I couldn't do that because one Azure Firewall is using it. It seems be like an infinite loop.

    I am afraid my bill will be charged on the day my sub is reactive if I don't delete the firewall before. The sub is then potentially disabled again and I will not be able to use it anymore in the future. Could you please help me temporarily re-enable my sub? I will then delete the firewall quickly and you can disable my sub as planned.

    Thanks and best regards,
    Alex

    0 comments
  3. Rachel Gomez 166 Reputation points
    2022-12-21T05:55:06.603+00:00

    Could you confirm if the Azure Firewall "AZFW01" was unlinked from the Azure Firewall policy "FirewallPolicy_AZFW01" before you tried a delete? If no, then you have to unlink the Azure Firewall first and then try deleting the Azure Firewall & Firewall policy either via portal/PowerShell.
    Regards,
    Rachel Gomez

    0 comments