Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Grub read error

Dear community

Today we had a problem with two XG 135 firewalls. The two firewalls where configured to run in a active-passive HA cluster.

A little while back the passive unit went to a faulty state.

We asked our customer try restarting the faulty unit but it didn't go back to the Auxiliary state.

Today I went to the customer trying to troubleshoot the problem. I wanted to re initiate the HA cluster by disable it on the active unit, factory reset the passive unit and reconfigure HA on the active unit.

When I tried to reset/restart the passive unit I got the following message:

It didn't matter if i pressed 'DEL' 'ESC' or 'F7', With all the options it went to the following error:

Anyone know how to resolve this problem? I was thinking of adding a new image on the firewall via usb, but really want to know if there are any other solutions to this problem.

Thanks in advance!



This thread was automatically locked due to age.
Parents Reply Children
  • Dear Erick Jan

    I tried re-imaging the firewall via USB but kept getting the same error message as shown below:

    Also tried different tools as Rufus and BalenaEtcher for making the isofile bootable on the USB. Also tried the dd format option in Rufus. I think I kind of tried everything I can do to re-image the firewall but nothing seems to work. I think the hard drive had it's best time. If you got any other suggestions, please let me now. If not I think I make a case of it and see what the next steps will be.

    And again, thanks for the quick replies!

  • Hi Frank,

    I've found an old post with the same error. Kindly refer to the following  Install says "Cleaning NVRAMERROR: Unable to clean NVRAM" 

    "Basically it is due to boot from USB stick as the SFOS is treating the USB disk as the main partition and unable to clean the NVRAM because the partition on that disk becomes readonly.

    I could overcome this message by installing from a CD/DVD. I burned the ISO directly onto a disk and booted by machine from the disk drive, it worked like a charm!"

    Erick Jan
    Community Support Engineer | Sophos Technical Support
    Sophos Support Videos Product Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.

  • Dear Erick Jan

    Sadly the unit doesn't have a diskdrive in it so the CD/DVD solution doesn't work for us.

    I created a case id at the Sophos support page and wait til I got an reaction from them to see what to do with the firewall.

    Probaly going to send it RMA.

    Thanks again for the quick replies and the help!

    Frank Boender