This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to perform a factory reset on SG UTM (with no access)?

I am trying to help a small business out the recently bought an SG115W, and has quickly managed to completely brick it.  I cannot get acces to it under any circumstances...I've tried everything.  The device looks OK, when I connect to the VGA input, I see everything loading, and while it moves quick, I don't see any clear warnings or apparent issues.  Cannot log in to CLI either over VGA after it loads...  Bricked.

So...I had moved on resolving myself to a factory reset and soon realized the paper clip method doesn't work?  Apparently the hardware reset button isn't enabled?? Seriously?? Without venting too much on why that is....well...moving on, how do I then reset it back to factory defaults?  The serial port?

I have found a computer with a serial port, so is that the only way?

If so, can someone at Sophos detail the steps for this please?  I see there are some prior posts about this, but looks like they are many years old.  Would appreciate an udpate for the SG appliances.

Thanks in advance.



This thread was automatically locked due to age.
Parents
  • You can download the software again from https://www.sophos.com/en-us/support/utm-downloads.aspx.

    Choose the hardware appliance version since you have one.

    The easiest solution is to burn it to CD/DVD and put that in a USB DVD-drive which you can connect to the SG115W. Then boot the SG115W and it will automatically begin reinstalling the device (deleting all current partitions!).

    If you don't have a USB DVD drive, you can use Rufus to create a bootable USB-stick from the ISO and start the device with it. You will then however need to press ALT-F2 to get to a terminal screen (once setup screen shows) and then type the following commands:

    mount /dev/sdb1 /install           (usually your USB drive will be /dev/sdb1 but it is possible that it will get another devicename which you will then have to find out)

    Then you can press ALT-F1 to get back to the installation screen.
    If you don't type in this command, there will be no /install mount point and installation will fail.

    Be aware though that this procedure will erase the harddrive!


    Managing several Sophos firewalls both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

Reply
  • You can download the software again from https://www.sophos.com/en-us/support/utm-downloads.aspx.

    Choose the hardware appliance version since you have one.

    The easiest solution is to burn it to CD/DVD and put that in a USB DVD-drive which you can connect to the SG115W. Then boot the SG115W and it will automatically begin reinstalling the device (deleting all current partitions!).

    If you don't have a USB DVD drive, you can use Rufus to create a bootable USB-stick from the ISO and start the device with it. You will then however need to press ALT-F2 to get to a terminal screen (once setup screen shows) and then type the following commands:

    mount /dev/sdb1 /install           (usually your USB drive will be /dev/sdb1 but it is possible that it will get another devicename which you will then have to find out)

    Then you can press ALT-F1 to get back to the installation screen.
    If you don't type in this command, there will be no /install mount point and installation will fail.

    Be aware though that this procedure will erase the harddrive!


    Managing several Sophos firewalls both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

Children
  • OK.

    Quick question...will the serial port method wipe the drives, needing to have the software re-installed?  Or just do a factory reset?

    I've got a computer with the serial port, and now created the bootable USB drive with the hardware image.  I'll be tackling this in the afternoon, so hopefully goes well, and will update then.

    Will try the serial port first.

    Thanks for the advice!