How to reimage XG Firewall

You can reimage hardware, virtual, and software appliances.


You use a bootable USB flash drive to reimage the device.

CAUTION Reimaging deletes all the data on XG Firewall. Save a recent configuration backup.

Reimage XG Firewall

You can reimage XG Firewall with any firmware version.

Use a bootable USB flash drive and reimage the device.
  1. Download and burn an ISO image to a bootable USB flash drive.
    1. Go to Sophos Licensing Portal and sign in.
    2. Go to Network Protection > Download Installers and select the required hardware, virtual, or software installer.

      Download installer
    3. Download balenaEtcher, a free tool to create a bootable USB flash drive.
    4. Run balenaEtcher and accept the license agreement.

      balenaEtcher license
    5. Insert a USB flash drive in your endpoint device. Select the firmware image you downloaded.
      Note The USB flash drive will be formatted. You'll lose all data on it.

      Select firmware ISO
    6. Click Flash and wait for flashing and validation to complete.

      Click flash

      Flashing ISO

      Validating ISO

      ISO copied
  2. To reimage XG Firewall, do the following:
    1. Power off XG Firewall.
    2. Optional To monitor the installation, connect an SVGA monitor to the SVGA port of XG Firewall.

      If it doesn't have an SVGA port, use an LCD panel to monitor the installation.

    3. Insert the bootable USB flash drive you created in XG Firewall.
    4. Power on XG Firewall.
    5. To enter the BIOS, press the Delete key when XG Firewall is starting. Make sure USB Key is the first boot option in the BIOS.

      BIOS boot option USB key
    6. Save and exit the BIOS.

      The device restarts.

      BIOS save and reset
    7. Sophos Firmware Installer starts reimaging XG Firewall.

      Reimaging device
    8. Monitor the installation.

      Monitor installation
    9. After the firmware is installed, remove the USB flash disk and type y to restart XG Firewall.

      Restart device
    10. XG Firewall restarts with the default configuration.

      Default configuration
    11. Sign in and restore the configuration you want.