CHAPTER 2: Administration Mode Commands36 WatchGuard Vclass 5.1crypto self-test, and random number generationcan be tested.- Object reuse is avoided. Keys are zeroed outwhen they are no longer in use.Common Criteria (CC) modeCommon Criteria (CC) defines a language fordefining and evaluating information technologysecurity systems and products. The frameworkprovided by Common Criteria allows USgovernment agencies and other groups to definesets of specific requirements.IT security products purchased by the USGovernment for National Security Systems, whichhandle Classified and some non-Classifiedinformation, are required to be Common Criteriacertified.Common Criteria mode conforms to EAL4 level.Common Criteria mode disables or changes thefollowing functionality:- HTTPS uses 3DES-SHA1 encryption only.- User login failure count can be configured, andusers can be locked out after the failure count ismet. See “account command” on page 28 formore information.passwd commandWG#adminWG(admin)#passwd EffectReplaces the current “admin” super user accesspassword text with a new entry. This commandinitiates a several-step process in which you will beprompted to enter the new password twice, beforeit takes effect. See “Process” immediately followingfor details.
