WSM User Guide - WatchGuard Technologies

Changing the Firebox Passphrases10 From the Add Address dialog box that appears, under Available Members, select Firebox. ClickAdd.11 Click OK, OK, and Close. Save the configuration to the Firebox.You can make the Firebox send a trap for any policy in Policy Manager. Edit the policy that will trigger atrap. To do this, double-click the policy icon shown in Policy Manager to edit the configuration. From theEdit Policy Properties dialog box, select the Properties tab. Click Logging and select the Send SNMPTrap check box.Using MIBsWatchGuard® System Manager with Fireware® appliance software supports two types of ManagementInformation Bases (MIBs):• Public MIBs are used in the Fireware product and are copied on to your WatchGuardmanagement station when you install Fireware. These MIBs include IETF standards and MIB2.• Private MIBs are MIBs created by WatchGuard to provide basic monitoring information for specificcomponents in the Firebox, including CPU and memory utilization, and interface and IPSecmetrics.When you install WatchGuard System Manager, MIBs are installed toMy Documents\My WatchGuard\Shared WatchGuard\SNMP.The Firebox supports these read-only object MIBs:- RFC1155-SMI- SNMPv2-SMI- RFC1213-MIB- RAPID-MIB- RAPID-SYSTEM-CONFIG-MIBChanging the Firebox PassphrasesA Firebox® uses two passphrases:• Status passphraseThe read-only password or passphrase that allows access to the Firebox• Configuration passphraseThe read-write passwordor passphrase that allows an administrator full access to the FireboxTo create a secure passphrase, we recommend that you:• Use a selection of uppercase and lowercase characters, numbers, and special characters (forexample, Im4e@tiN9).• Do not use a word from standard dictionaries, even if you use it in a different sequence or in adifferent language. Make a new acronym that only you know.• Do not use a name. It is easy for an attacker to find a business name, familiar name, or the name ofa famous person.An additional security measure is to change the Firebox passphrases at regular intervals. To do this, youmust have the configuration passphrase.1 From Policy Manager, open the configuration file on the Firebox.64 WatchGuard System Manager