Firewall in failsafe mode

Question

Hi to all, 
 I have two devices in HA... Yesterday, doing some tests, I did be able to see that the passive device is in failsafe mode. If I do a "show failure-reason" command, the device tells me "Unable to apply Firewall Framework"... 
 How could I recover this device??? This device is new (I bought them about two weeks ago), is it normal??? 
 Thanks to all!! 
 Regards, 
 David.

Ronak Sheth · Answer

Hello, 
 You can connect your appliance through console cable and restart device and press enter to go to the boot menu and select boot loader and follow the steps to update new firmware from scratch. 
 For detail steps refer below link. 
 
 Good luck!!! 
 Regards, Ronak.

lferrara · Answer

David, 
 are you using Sophos appliances or intel x86 hw? 
 The best way is to remove the HA, format the secondary unit and join it again inside the cluster. 
 Regards,

sachingurung · Answer

Hi David, 
 Select option 2. Reset to factory defaults >3. Reset configuration, report and signatures. This will reset the appliance to factory default settings. 
 Refer the below link to disable HA. 
 https://www.sophos.com/en-us/medialibrary/PDFs/documentation/SophosFirewall/Pocket%20Guides/DisableHighAvailabilityHA.pdf?la=en 
 Thanks

Aditya Patel · Answer

HI David, 
 As per my observation, you device went in Failsafe mode. 
 You would need to reset the device to default and configure the address on your interface which different from your primary appliance. Once the Address is pingable from both end you may enable HA on your Primary appliance . At this stage, your Secondary would reboot and would be configured. 
 To check the system is in HA , you may check on your primary appliance by the command provided by Sachin . 
 To reset the Device you would need to Select Option 2. 
 Note If the device again went to failsafe mode then you may need to contact support to check the device .

sachingurung · Answer

Hi David, 
 Select option 2. Reset to factory defaults >3. Reset configuration, report and signatures. 
 If the device still boots up in the fail-safe mode then, you need to manually load a firmware from SF loader. Let me know what happens after the reset. 
 Thanks

Aditya Patel · Answer

Hi Wisnu, 
 There are various reasons for failing into Failsafe mode, This would include database corruption, fail to load configuration etc and would suggest to keep a backup file to re-image and load the backup .