watcguard firebox 700 reset procedure

catmr
catmr used Ask the Experts™
on
I have a firebox 700 with the ver 8.0 firmware. Password was lost.
I try to start the Firebox in safe mode and run wsm 7.5 but I cannot access the firebox.I'm able to ping it from the pc connected to it but the quick setup wizard cannot access.The error says to be sure the firebox supports "hands free installation"

How can I reset and access the firebox?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
which type of cable you connected ?


serial?

lan strt crimped?

cross crimped?
Is this Fireware? Or WFS?

If you are using WFS you just open policy manager but DO NOT connect with system manager. Select Save>To Firebox, enter the RW passphrase and save a full flash image so you can then declare new passwords for the RO and RW.

If Fireware, just use the change passphrases menu item, all you need is the RW to change them.


Note - above procedure if u lost read only password not admin password.

Author

Commented:
IT'S A FIREBOX X 700.

i USE A CROSSOVER ETHERNET CABLE AND I CAN PING THE BOX
Python 3 Fundamentals

This course will teach participants about installing and configuring Python, syntax, importing, statements, types, strings, booleans, files, lists, tuples, comprehensions, functions, and classes.

Author

Commented:
i DON'T HAVE ANY PASSWORDS.All passwords were lost.
I tryed to download wsm7.5(I cannot find wsm 8) .I ran quick setup wizard and I got the error I post in the body of my question.
Any newer ver of wsm(9, 10 etc) it will not work with the firebox because the firmware ver is 8.0
admin password? read only password?
it is fireware pro 8.0 rite?
if you want i have WatchGuard® System Manager 8.3
if you have valid license you can download it from web
Syed Mutahir Alibinarybonsai

Commented:
http://www.billthecomputerguy.com/itsupport/firewall/How%20to%20Default%20a%20Firebox%20700.doc
http://blog.scottlowe.org/2005/12/06/watchguard-firebox-vpn-and-active-directory-integration/

Following procedure is written in the above blog post's comments :

You must have the Management Software istalled.

Connect directly to the Trusted port using a cross over cable with a static IP or 192.168.253.xxx Not .1

1 Unplug power from firebox.
2 Push and Hold reset button.
3 Plugin power to firebox.
4 Wait for red light and flashing triangle.
5.Use the Quick Setup Wizard to re-Configure the unit. Default IP 192.168.253.1
6.Default password will be shown during setup and you will get to change it.
7. Change your IP Rang accordingly if you change Trusted network Ip Settings. (DHCP is not enabled be default)
8.Use Policy Manager to configure firewall.
9.Expect reboots and 4 min down time for reboots. (I counted it on my 1000)

There is a Student manual floating around out there. Get it! it helps.

************************************************
DaveLChgo said:
*** CAUTION ***
This will wipe out all of your settings on the firebox and set them to factory defaults.

1 Unplug power from firebox.
2 Push and Hold reset button.
3 Plugin power to firebox.
4 Wait for red light to come on and go off.
5 Release reset button.
6 Unplug power.
7 Plugin power.

Now Iam doing this from memory so steps 4 and 5 might be….
4 Wait for red light to come on.
5 Release reset button and wait for red light to go off.

This should allow you to reset -

From the watchguard support :

If you have a configuration problem that you cannot correct, you can restore the factory default settings and start with a new configuration file. For example, if you do not know the administrator account passphrase or if a power interruption causes damage to the Firebox appliance software, you can restore the Firebox to the factory default settings and build your configuration again.

To restore the Edge e-Series to the factory default settings:

Disconnect the power supply.
Hold down the Reset button on the back of the Edge.
Continue to hold down the Reset button, and connect the power supply.
Hold down the Reset button. When the yellow Attn light stays lit, the Edge was successfully restored to the factory default settings.
This process can take 45 seconds or more.
Release the Reset button.
Do not try to connect to the Edge at this time. Before you can connect to the Edge, you must start it one more time. If you do not, when you try to connect to the Edge a web page appears with this message: Your WatchGuard Firebox X Edge is running from a backup copy of firmware. You could also see this message if the Reset button is stuck in the depressed position. If you continue to see this page, check the Reset button, and start the Edge again.
Disconnect the power supply.
Connect the power supply again.
The Power Indicator lights and your Edge is reset.
After you reset the Firebox to the factory default configuration, you can use the quick setup wizard to create a basic configuration or to restore a saved backup image to the Firebox.

To start the Web Setup Wizard:

Open a web browser and type the factory default IP address of interface 1. For a Firebox X Edge e-Series, the address is: https://192.168.111.1:8080.
Log in with the default administrator account credentials:
Username: admin
Passphrase: readwrite

http://watchguard.custhelp.com/cgi-bin/watchguard.cfg/php/enduser/popup_adp.php?p_faqid=2293&p_created=1248197964
please check the firebox display whether it is booting SYSB mode

please confirm once it booted sysb mode then run quick setup
finally got some information

FYI - you have a FB X700. The correct model number is important.
V8.0 is Fireware.
V7.5 is WFS.
These are two incompatible OSes.
Since you are running Fireware, you need to install a Fireware version on your FB or you need to
run FBXinstall to downgrade your FB to WFS.
Reset a Firebox if you cannot connect to it with the Quick Setup Wizard [WSM/Fireware 9.1]
http://watchguard.custhelp.com/cgi-bin/watchguard.cfg/php/enduser/std_adp.php?p_faqid=1213
Top Expert 2007

Commented:
Please have a look at the link below to reset a FB III 700 to factory defaults [please note you would loose all current settings, but after you have restored connectivity to the box you can load old configuration file using the same version in which it was created]

http://watchguard.custhelp.com/cgi-bin/watchguard.cfg/php/enduser/std_adp.php?p_faqid=1609&p_created=1224884367&p_sid=mQl*gdTj&p_accessibility=0&p_redirect=&p_lva=&p_sp=cF9zcmNoPTEmcF9zb3J0X2J5PSZwX2dyaWRzb3J0PSZwX3Jvd19jbnQ9MjY2LDI2NiZwX3Byb2RzPTIyNywyMjgmcF9jYXRzPSZwX3B2PTIuMjI4JnBfY3Y9JnBfcGFnZT0xJnBfc2VhcmNoX3RleHQ9cmVzZXQgZmlyZWJveCBJSUk*&p_li=&p_topview=1

To restore old configuration file.
Open the old configuration file in the same version it was created, save to firebox.

Please update if you need more details.

Thank you.

Author

Commented:
Guys as i said in my questions , i do not have any password for the FB X700 and i cannot use wsm to save or connect to FB.The ver of the firmware is 8.0

I cannot use wsm 8.3 and above software (FB has an older firmware)

When i try quick setup wizard fromwsm 7.5 I get an error " be sure the FB supports "hands free installation"

I do not have wsm 8.0 . The license I have are for 7.5, 8.3, 9 and above



Top Expert 2007

Commented:
As you were using ver 8; it would be advisable to use 8.3 and not 7.5.

As you have lost password, you can reset FB to factory default and reconfigure it from scratch [or load previous configuration]; or check with WG support and get version 8.0 from them and reset the unit using version 8.0.

Have a look at link below:
http://www.watchguard.com/help/docs/fireware/10/en-US/index_Left.html#CSHID=en-US%2Fbackup_upgrade_recovery%2Frecovery_procedures_f.html|StartTopic=Content%2Fen-US%2Fbackup_upgrade_recovery%2Frecovery_procedures_f.html|SkinName=Fireware%20%28en-US%29

Please update if you need more details.

Thank you.

Author

Commented:
I di not have wsm 8.0 and looks like the licenses we have are for 7.5, 8.3 and above.
The wsm 8.3 cannot run quicksetup wizard. I got an error message saying the wizard cannot continue on the firebox with 8.0 and i have to run wsm 8.0
Does anybody has wsm 8.0?
YOU CAN DOWNLAD IT FROM WATCH GUARD WEBSITE

Author

Commented:
On the watchguard website you can download only the wsm you are licensed for.
Commented:
I spoke to WG tech support and they sent me a link to download wsm 8.0 and I was able to reset the box.

Thank You for your help

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial