NOTE: Due to security scanning on the instance, it can take up to 2 minutes after Status Checks have passed for the WebGUI and SSH login to be available for the machine.

SSH Access:

SSH is enabled and can be accessed only via key authentication, use port 22. Password logins are available for the ec2 console and WebGUI ( use https port 2000). ex: https://123.123.123.123:2000 

User Accounts

There are two user accounts:

1. "root" (initially disabled)
2. "ec2-cfw"

Password Format

The passwords for the accounts follow a specific format that includes the instance ID. If ever conducting a factory reset the passwords for both accounts will be reset to the original passwords as below. Please, if ever changing passwords which is recommended make a copy of the new passwords to avoid being locked out.

• "root":

• Password format: -=&%!INSTANCEID!%&=-

• "ec2-cfw":

• Password format: -=***INSTANCEID***=-

• Example for "ec2-cfw": -=***i-0de16bd57d390efaf***=-

Interface Setup

To correctly set up interfaces, the "root" account will need to be enabled. Access the ec2 console to assign the interfaces appropriately. Without this step, the LAN interface might be misidentified as Optional 1 (OPT1), which can cause issues with rule configurations.

Note: While the "root" account is initially disabled, users have the option to enable it if needed (such as above). This can help in setting up interfaces correctly but should be done cautiously to avoid reducing security. Please disable root account after completing given tasks.

VPN and Security Groups

There are 2 VPN services available one for half split tunnel and one for full tunnel. For best practices with remote administration please make use one of the VPNs. Once VPN is operable, please disable direct access to the firewall via the WAN and disable the rule TCP 2000 in the security group. Also, please do same for the SSH.