Setting the Password on First Login to FileWave Appliances (15.5+)

What
Starting from FileWave version 15.5.0, there have been important changes to the default login process and security features of the FileWave Appliance:
 Disabled Root Login: The root user is now disabled from logging in directly to enhance security.
New Default User - User: fwadmin (as of 15.4.0), default password: filewave.
Mandatory Password Change: On the first login, fwadmin will be prompted to change the password. It’s crucial to choose a secure password and keep a record of it.
Sudo Access: The fwadmin user has sudo privileges to perform administrative tasks that require root access.
Enhanced Security with Fail2Ban: Fail2Ban has been added to protect against unauthorized access attempts. It will temporarily block IP addresses after a number of failed login attempts.
For security, the account for root is disabled as of version 15.5.0.
These changes apply to new Debian-based Appliances starting from version 15.5.0 and onward.
Existing Debian Appliances will not have these changes implemented unless you manually make the changes or migrate to a new Appliance.
When/Why
These changes have been implemented to strengthen the security of your FileWave Appliance:
Prevent Unauthorized Access: Disabling direct root login reduces the risk of unauthorized access, as root accounts are common targets for attackers.
Enforce Stronger Passwords: Prompting a password change on first login ensures that default credentials are not used, which are often exploited.
Monitor and Block Attacks: Fail2Ban helps in detecting and preventing brute-force attacks by banning IP addresses that show malicious signs.
Promote Best Security Practices: Encouraging the use of sudo and secure passwords aligns with industry best practices for system administration.
Existing Appliances
To benefit from these changes either:
Manually Implement the Changes: Adjust your current Appliance settings to match the new security configurations.
Migrate to a New Appliance: Set up a new Appliance with version 15.5.0 or later and migrate your data accordingly.
How
First Login and Password Change
Access the Appliance: Connect to your FileWave Appliance via SSH or console.
Login as fwadmin: Use the username fwadmin and the default password filewave.
Change Password: You will be prompted to change the password immediately.
Enter New Password: Choose a strong, unique password.
Confirm New Password: Re-enter the password to confirm.
Note the Password: Keep the new password in a secure place.
Using Sudo for Administrative Tasks
Run Commands with Sudo: Prefix administrative commands with sudo.
sudo apt-get update
Enter Password When Prompted: You may be asked for your fwadmin password when executing sudo commands.
Fail2Ban Security Measures
Automatic IP Blocking: After several failed login attempts, Fail2Ban will block the offending IP address temporarily.
Check Ban Status:
sudo fail2ban-client status sshd
Unban an IP (if necessary):
sudo fail2ban-client set sshd unbanip <IP_ADDRESS>
Best Practices
Do Not Expose SSH to the Internet: Keep SSH access limited to trusted networks.
Use Strong Passwords: Incorporate letters, numbers, and special characters.
Regularly Update the Appliance: Keep your system updated to patch vulnerabilities.
Monitor Access Logs: Regularly check logs for any unauthorized access attempts.
Related Content
FileWave Version 15.5.0