Firebrick

This guide covers FireBrick FBxxxx appliances (for example the FB2500, FB2700, FB2900, and FB6000 series).

Create a backup account

Create a dedicated user named netwatch-backup in the FireBrick user configuration (in the web UI, edit the system users). Assign a login level high enough to view the full configuration — on FireBrick this means an ADMIN-level user, as lower levels cannot read the complete configuration.

FireBrick lets you restrict each user to specific source addresses; set the allowed-address restriction on the netwatch-backup user to the Netwatch collector's IP for defense in depth.

Enable management access

FireBrick devices are managed through their web interface and a command-line interface. Make sure CLI access is enabled in the system settings and permitted from the Netwatch collector's IP address in the device's access restrictions. FireBrick access controls are address-based — review the allow lists for management services so the collector is included and untrusted networks are not.

Platform notes

• The FireBrick configuration is a single XML document; QUARK retrieves and versions it as-is, so every change appears clearly in the history.
• QUARK is read-only: it never uploads or modifies the configuration.
• If your FireBricks are managed centrally with shared user profiles, you can define the netwatch-backup user once and roll it out with your normal profile mechanism.

Enable backup in Netwatch

Once the device is prepared, open its host in Netwatch (Data collection > Hosts) and add the Config Backup macros — the supported status flag, the model code for this platform, and the credentials you created. See Getting started for the full macro list and values.