https://live.paloaltonetworks.com/t5/next-generation-firewall/factory-5220/m-p/1205513#M5452 <P>&nbsp;</P> <P>There are two drives on the 5220. The factory reset for version 10 says to select maintsys-root1 and reset. Why not root0 as well. The device has two drives so wouldn't maint-syroot0 need to be ran as well? It looks like the drives are setup in a raid that mirrors the drives (not sure exactly). With this being said I don't know the different ways the drives can be configured. I'm not sure if just selecting maintsys-root1 in maintenance and do a scrub will reset both drives in every scenario. With out knowing how it works, I would think the safest way to guarantee a full factory reset is would be to:<BR />remove sys drive 1<BR />reset sys drive 2 by selecting maint-sysroot1 in maintenance mode<BR />power it off when done <BR />remove sys drive 1<BR />insert sys drive 2<BR />reset sys drive 1 by selecting reset maint-sysroot0 in maintenance mode and scrub.<BR />I'm not sure if all of this is necessary but I don’t not know all the different way the drives can be configured and how the customer configured it, I'm thinking this is the safest bet but it takes forever since I am scrubbing both drives independently. Is there a shorter or easier way and guarantee both drives are factory reset and scrubbed? <BR />Finally, I also found the message below on one of the community boards which is concerning. What does "debug swm factory-reset" get rid of that the scrub does not?<BR />"Try using the "debug swm factory-reset" command in maintenance mode for a more thorough reset. Ensure you back up the OS beforehand to avoid potential issues with reinstalling or restoring."</P> Mon, 27 Jan 2025 19:59:46 GMT DJDN12 2025-01-27T19:59:46Z https://live.paloaltonetworks.com/t5/next-generation-firewall/factory-5220/m-p/1205513#M5452 <P>&nbsp;</P> <P>There are two drives on the 5220. The factory reset for version 10 says to select maintsys-root1 and reset. Why not root0 as well. The device has two drives so wouldn't maint-syroot0 need to be ran as well? It looks like the drives are setup in a raid that mirrors the drives (not sure exactly). With this being said I don't know the different ways the drives can be configured. I'm not sure if just selecting maintsys-root1 in maintenance and do a scrub will reset both drives in every scenario. With out knowing how it works, I would think the safest way to guarantee a full factory reset is would be to:<BR />remove sys drive 1<BR />reset sys drive 2 by selecting maint-sysroot1 in maintenance mode<BR />power it off when done <BR />remove sys drive 1<BR />insert sys drive 2<BR />reset sys drive 1 by selecting reset maint-sysroot0 in maintenance mode and scrub.<BR />I'm not sure if all of this is necessary but I don’t not know all the different way the drives can be configured and how the customer configured it, I'm thinking this is the safest bet but it takes forever since I am scrubbing both drives independently. Is there a shorter or easier way and guarantee both drives are factory reset and scrubbed? <BR />Finally, I also found the message below on one of the community boards which is concerning. What does "debug swm factory-reset" get rid of that the scrub does not?<BR />"Try using the "debug swm factory-reset" command in maintenance mode for a more thorough reset. Ensure you back up the OS beforehand to avoid potential issues with reinstalling or restoring."</P> Mon, 27 Jan 2025 19:59:46 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/factory-5220/m-p/1205513#M5452 DJDN12 2025-01-27T19:59:46Z