CLI Guide - WatchGuard Technologies

CHAPTER 2: Administration Mode Commands
crypto self-test, and random number generation
can be tested.
- Object reuse is avoided. Keys are zeroed out
when they are no longer in use.
Common Criteria (CC) mode
Common Criteria (CC) defines a language for
defining and evaluating information technology
security systems and products. The framework
provided by Common Criteria allows US
government agencies and other groups to define
sets of specific requirements.
IT security products purchased by the US
Government for National Security Systems, which
handle Classified and some non-Classified
information, are required to be Common Criteria
certified.
Common Criteria mode conforms to EAL4 level.
Common Criteria mode disables or changes the
following functionality:
- HTTPS uses 3DES-SHA1 encryption only.
- User login failure count can be configured, and
users can be locked out after the failure count is
met. See “account command” on page 28 for
more information.
passwd command
WG#admin
WG(admin)#passwd
Effect
Replaces the current “admin” super user access
password text with a new entry. This command
initiates a several-step process in which you will be
prompted to enter the new password twice, before
it takes effect. See “Process” immediately following
for details.
36 WatchGuard Vclass 5.1