WatchGuard Firebox System 4.6 User Guide

Resetting Firebox passphrasesSaving a configuration to the local hard diskFrom Policy Manager in the Advanced view:1 Select File => Save => As File.The Save dialog box appears.2 Enter the name of the file.The default is to save the file to the WatchGuard directory.3 Click Save.The configuration file is saved to the local hard disk.Saving a configuration to the FireboxFrom Policy Manager in the Advanced view:1 Select File => Save => To Firebox.2 Use the Firebox drop list to select a Firebox.3 Enter the configuration (read-write) passphrase. Click OK.The configuration file is saved first to the local hard disk and then to the primary area of theFirebox flash disk. You are prompted to restart the Firebox. The new Firebox configuration willnot be enabled until the Firebox is restarted.4 If you entered the IP address of a different Firebox, you are asked to confirm yourchoice. Click Yes.Resetting Firebox passphrasesWatchGuard recommends that for optimum security you periodically change theFirebox passphrases. To do this, you must have the current configuration passphrase.From Policy Manager:1 Open the configuration file running on the Firebox.For more information, see “Opening a configuration from the Firebox” on page 23.2 Select File => Save => To Firebox.3 Use the Firebox drop list to select a Firebox. Enter the configuration passphrase.Click OK.4 Enable the Save To Firebox checkbox. Select Save Configuration File and NewFlash Image. Click Continue.5 Enter the new monitoring (read-only) and configuration (read-write) passphrases.Click OK.The new image, including the new passphrases, is saved to the Firebox, and the Fireboxautomatically restarts.Make certain that your monitoring and configuration passphrases are different from one another.Tips for creating secure passphrasesAlthough an attacker could crack any passphrase eventually, you can toughen yourpassphrases using the following tips:• Don’t use words in standard dictionaries, even if you use them backward or in aforeign language. Create your own acronyms instead.• Don’t use proper names, especially company names or those of famous people.24