Reset a Firebox

If your Firebox has a configuration problem, or you just want to create a new configuration, you can reset the device to its factory-default settings. For example, if you do not know the configuration passphrase, or if a power interruption causes damage to the Fireware OS, you can use the Quick Setup Wizard or Web Setup Wizard to build your configuration again or restore a saved configuration.

After you perform the reset procedure:

  • The Firebox is reset to factory-default settings.
  • Any saved backup images are deleted from the Firebox.
  • Interface 0 is enabled as an external interface, as a DHCP client.
  • Interface 1 is enabled as a trusted interface with the IP address 10.0.1.1, and DHCP server is enabled.
  • Interface 32 is enabled as a trusted interface with the IP address 10.0.32.1, and DHCP server is enabled (Firebox M5600 and M5800 only)
  • Interface 24 is enabled as a trusted interface with the IP address 10.0.24.1, and DHCP server is enabled (Firebox M4800 only)
  • The default admin and status management user accounts are available, with the default passphrases.
  • The Web Setup Wizard starts automatically when you log in to Fireware Web UI.
  • The device is discoverable by the WSM Quick Setup Wizard.
  • The previously installed feature key is removed. When the Firebox restarts, if Interface 0 is connected to a network and can get a DHCP address, the Firebox automatically attempts to download the latest feature key from WatchGuard.
  • The device is discoverable as a new FireCluster member (if the device supports FireCluster). For more information about FireCluster device discovery, go to Discover a Cluster Member.

For a complete description of the factory-default settings, go to About Factory-Default Settings.

Backup images saved on your Firebox are removed when you reset it to factory-default settings. Before you reset a Firebox, we recommend that you export a recent backup image from the Firebox. For more information, go to Export a Backup Image Stored on the Firebox. If you want to reset the Firebox and do not want to remove the saved backup images, use the CLI command restore factory-default without the all parameter. For more information on backup images, go to Firebox Backup and Restore.

Reset Steps by Device Model

Make sure that you complete all of the steps. You must complete the second reboot at the end to restart your device before you can connect to it. The IP address of the trusted interface changes to 10.0.1.1. For more information, go to About Factory-Default Settings.

  1. Power off the Firebox.
  2. Press and hold the Reset button on the back of the Firebox.
  3. While you continue to hold the Reset button, power on the Firebox.
  4. Continue to press the Reset button until the Attn indicator begins to flash.
  5. Release the Reset button. Do not power off the Firebox yet.
  6. Wait for the reset process to complete. This can take as long as 70 seconds. When the reset is complete, the Attn indicator stays lit and does not flash.
  7. Power off the Firebox.
  8. Power on the Firebox.
    The Firebox restarts with factory-default settings.
  1. Power on the Firebox.
  2. Wait until the Arm indicator ( Shield symbol ) is green.
  3. Press and hold the Reset button on the front of the device.
    After five seconds, the Arm indicator is red.
  4. Continue to hold the Reset button while the Arm indicator is red or is not lit.
    After 40 seconds, the Arm indicator starts to flash green.
  5. Continue to hold the Reset button while the Arm indicator flashes green once per second.
  6. After the Arm indicator starts to flash green twice per second, release the Reset button.
  7. Wait until the Arm indicator starts to flash red.
  8. Press and hold the Reset button for five seconds to reboot the device.
    The Firebox restarts with factory-default settings.

Before you reset a Firebox M5600, make sure you have an interface module installed in slot A. For more information, go to About Modular Interfaces.

  1. Power off the Firebox.
  2. Press and hold the Reset button on the front left of the device, and briefly press the Power button on the front of the device to power it on.
    The Arm indicator is red.
  3. Continue to hold the Reset button while the Arm indicator ( Shield symbol ) is red.
    The Arm indicator starts to flash green.
  4. Continue to hold the Reset button while the Arm indicator flashes green once per second.
  5. After the Arm indicator starts to flash green twice per second, release the Reset button.
  6. Wait until the Arm indicator starts to flash red.
  7. Press and hold the Power button for five seconds to power off the device.
  8. Briefly press the Power button on the front of the device to power it on.
    The Firebox restarts with factory-default settings.
  1. Power off the Firebox.
  2. Press and hold the Reset button on the front left of the device, and briefly press the Power button on the front of the device to power it on.
  3. Continue to hold the Reset button until the Attn indicator begins to flash.
  4. Release the Reset button.
  5. Wait until the Attn indicator stays lit and does not flash.
  6. Press and hold the Power button for three seconds to power off the device.
  7. Briefly press the Power button on the front of the device to power it on.
    The Firebox restarts with factory-default settings.
  1. Power off the XTM device.
  2. Press and hold the down arrow button on the device front panel while you power on the device.
  3. Continue to press the down arrow button until the message Safe Mode starting appears on the LCD display.

When an XTM device is started in safe mode, the LCD display shows the model number followed by the word safe. When you start a device in safe mode:

  • The device temporarily uses the factory-default network and security settings. In safe mode, the IP address of interface 1 is 10.0.1.1.
  • The current feature key is not removed. If you run the Quick Setup Wizard to create a new configuration, the wizard uses the feature key previously installed on the device.
  • Your current configuration is deleted only when you save a new configuration file to the XTM device. If you restart the device before you save a new configuration, the device uses your current configuration

A feature key does not contain any identifiable information about a WatchGuard customer. The information that the feature key contains is bound to the serial number of the Firebox and contains licensing information only.

To restore a FireboxV or XTMv VM (virtual machine), you must run the Fireware CLI restore factory-default command .

For more information, go to Reset FireboxV or XTMv to Factory-Default Settings.

After you restore the factory-default settings, you can connect your computer to interface 1 and use the Quick Setup Wizard or Web Setup Wizard to create a basic configuration or restore a saved backup image.

For more information, go to About Firebox Setup Wizards.

Related Topics

Restore a Firebox Backup Image

Use a USB Drive for System Backup and Restore

Automatically Restore a Backup Image from a USB Drive