USB on front of SG310 - what can it be used for?

Hello Luis-M,

You can install a new system image.

Download a Hardware-Appliance-Image *.iso,

Burn it on a CD/DVD.

Plug a USB DVD/CD Drive in the USB Port of the SG.

Power On the SG Appliance and wait. (the system starts DVD/CD on the plugged power on USB CD/DVD-device)

Watch the LCD-Display. (partitioning, formating,....) (circa. 7 minutes)

If the procedure is finished, start the SG and you have a renewed Appliance.

Remember: You will lost all your configuration and data.

Instead of this, You can use a USB Smart Installer. See this:

https://www.sophos.com/de-de/support/utm-downloads/utm-smart-installer.aspx

http://blog.tresw.com/english/installing-sophos-utm-9-x-from-a-usb-memory-stick/

Usefull if You plan to use a second device to configure the HA Option and your slave device

is delivered with a older UTM-Release.  For the Startup procedure to configure HA, you need the same

UTM-Release.

As Well:

Restore the physical device from a USB flash drive
This can be done using an unencrypted backup (.abf extension) in a FAT formatted USB flash drive.

1. Copy the backup file to the USB flash drive.
2. Turn off the UTM.
3. Plug the USB flash drive into the UTM.
4. The device will boot from the USB flash drive and restore to the unencrypted backup.

Note: If several backup files are stored on the flash drive, the file that comes first
lexicographically (numbers before letters) will be used. For example,
firewall_backup_2016-04-17.abf and 2015-11-20_firewall_backup.abf are both stored on the
USB flash drive. When the device turns on, the second file will be used because it begins with a number.

see:

https://www.sophos.com/de-de/support/knowledgebase/119814.aspx

Unknown said:

Usefull if You plan to use a second device to configure the HA Option and your slave device

is delivered with a older UTM-Release.  For the Startup procedure to configure HA, you need the same

UTM-Release.

If the delivered slave device has an oder release that the master, the update is done automatically.

You only have to reinstall delivered slave, if it has newer firmaware than the master.

papa_ said:

If the delivered slave device has an oder release that the master, the update is done automatically.

You only have to reinstall delivered slave, if it has newer firmaware than the master.

Did you ever try that  in lab or production ?
Official HA prerequisite is that both instances must be at the same software version.

I tried several times with success on 9.3xx.

Sophos support also told me, there is no need to reinstall a RMA device with older firmware - just plug and play

I didn't know about that, will try it in my lab as soon as I find some spare time.

Hello Papa_

only if the 2. digit from the release is the same and the 3.digit is minor different.

If quite different, the system is starting,.... shows: UP2DATE
and then shut down the device.

In one of my cases:  one device 9.355, the other one 9.315

So I had to use the USB Port ;-)

Hello Papa_

only if the 2. digit from the release is the same and the 3.digit is minor different.

If quite different, the system is starting,.... shows: UP2DATE
and then shut down the device.

In one of my cases:  one device 9.355, the other one 9.315

So I had to use the USB Port ;-)