System > Administration
108
SonicOS 5.8.1 Administrator Guide
Changing the Administrator Password
To set a new password for SonicWALL Management Interface access, type the old password
in the Old Password field, and the new password in the New Password field. Type the new
password again in the Confirm New Password field and click Accept. Once the SonicWALL
security appliance has been updated, a message confirming the update is displayed at the
bottom of the browser window.
Tip It is recommended you change the default password “password” to your own custom
password.
One-Time Password
One-Time Password (OTP) is a two-factor authentication scheme that utilizes system-
generated, random passwords in addition to standard user name and password credentials.
Once users submit the correct basic login credentials, the system generates a one-time
password which is sent to the user at a pre-defined email address. The user must retrieve the
one-time password from their email, then enter it at the login screen.
Login Security Settings
The internal SonicWALL Web-server now only supports SSL version 3.0 and TLS with strong
ciphers (12 -bits or greater) when negotiating HTTPS management sessions. SSL
implementations prior to version 3.0 and weak ciphers (symmetric ciphers less than 128-bits)
are not supported. This heightened level of HTTPS security protects against potential SSLv2
rollback vulnerabilities and ensures compliance with the Payment Card Industry (PCI) and
other security and risk-management standards.
By default, Mozilla Firefox 2.0 and MicrosoftAustralia: + 1800.35.1642
Austria: +43(0)820.400.105
EMEA: +31(0)411.617.810
France: +44 193.257.3927
Germany: +44 193.257.3910
Hong Kong: +1 800.93.0997
India: 000.800.100.3395
Italy: +44 193.257.3928
Japan: 0120.569122
New Zealand: + 800.446489
Singapore: + 800.110.1441
Spain: +44 193.257.3921
Switzerland: +44 193.257.3929
UK: +44 193.257.3929
Tip Internet Explorer 7.0 enable SSL 3.0 and TLS, and disable SSL 2.0. SonicWALL
recommends using these most recent Web browser releases. If you are using a previous
release of these browsers, you should enable SSL 3.0 and TLS and disable SSL 2.0. In