watchguard recommends that you periodically change the firebox passphrases for optimum security. to do this, you must have the current configuration passphrase. from policy manager:

    1 open the configuration file running on the firebox.

    for more information, see “opening a configuration from the firebox” on page 44.

    2 select file =] save =] to firebox.

    3 use the firebox drop list to select a firebox or enter the firebox ip address. enter the configuration passphrase. click ok.

    the firebox flash disk dialog box appears.

    4 enable the checkbox marked save to firebox and the radio button marked save configuration file and new flash image. disable the checkbox marked make backup of current flash image. click continue.

    5 enter and confirm the new status (read-only) and configuration (read/write) passphrases. the status and configuration passphrases must be different from one another. click ok.

    the new image, including the new passphrases, is saved to the firebox, and the firebox automatically restarts.

    tips for creating secure passphrases

    although a persistent attacker can crack any passphrase eventually, you can toughen your passphrases using the following tips:

    1?don't use words in standard dictionaries, even if you use them backward or in a foreign language. create your own acronyms instead.

    2?don't use proper names, especially company names or those of famous people.

    3?use a combination of uppercase and lowercase characters, numerals, and special characters (such as im4e@tin9).