User guide

Chapter 10: Creating Aliases and Implementing Authentication
138 WatchGuard Firebox System
Properties dialog box, and the IP address of the Firebox on the
CRYPTOCard authentication server.
From Policy Manager:
1 Select Setup => Authentication Servers.
The Authentication Servers dialog box appears.
2 Click the CRYPTOCard Server tab.
You might need to use the arrow buttons in the upper-right corner of the dialog box
to bring this tab into view.
3 Enter the IP address of the CRYPTOCard server.
4 Enter or verify the port number used for CRYPTOCard
authentication.
The standard is 624.
5 Enter the administrator password.
This is the administrator password in the passwd file on the CRYPTOCard server.
6 Enter or accept the time-out in seconds.
The time-out period is the maximum amount of time, in seconds, a user can wait
for the CRYPTOCard server to respond to a request for authentication. Sixty
seconds is CRYPTOCard’s recommended time-out length.
7 Enter the value of the shared secret between the Firebox and the
CRYPTOCard server.
This is the key or client key in the “Peers” file on the CRYPTOCard server. This
key is case-sensitive and must be identical on the Firebox and the CRYPTOCard
server for CRYPTOCard authentication to work.
8 Click OK.
9 Gather the IP address of the Firebox and the user or group aliases to
be authenticated by way of CRYPTOCard. The aliases appear in the
From and To listboxes in the individual services’ Properties dialog
boxes.