Options

Mass encryption key change

~Jon S~Jon S
in Firebox - Dimension, Logging and Reporting

We have a Dimension server with 25 devices in it. Is there any way to change the encryption keys without causing too much disruption. I tried to create a new key and add a second entry in the firewall to let it "fail-over" from one key to another, but I can not add multiple servers with the same address.

Comments

  • Options
    Bruce_BriggsBruce_Briggs

    If you have remote management access to your remote firewalls - using WSM Policy Manager - you can have multiple instances of Policy Manager open, one for each of your 25 firewalls, set up with the new Dimension encryption key.
    Then change the Dimension encryption key, and apply the 25 modified configs.
    This should go fairly quickly - within a minute or 2.

Sign In to comment.