> ## Documentation Index
> Fetch the complete documentation index at: https://docs.myrmex.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# WatchGuard Firebox

> Connect a WatchGuard Firebox to Myrmex over SSH — create the access account and add the integration.

import { Note, Steps, Step, CardGroup, Card, Tip } from '@mintlify/components';

Connect your **WatchGuard Firebox** (Fireware OS) so Myrmex can read its configuration, audit its hardening, help you review policies, and — with approval — apply changes. Myrmex reaches the device's command-line interface over **SSH** through a [Collector](/documentation/agent-endpoint-security/collector-mode) on your network, in real time.

## What Myrmex Can Do

<CardGroup cols={2}>
  <Card title="Read & troubleshoot" icon="magnifying-glass">
    Query interfaces, routing, policies, and system status on demand — read-only diagnostics.
  </Card>

  <Card title="Hardening audit" icon="shield-halved">
    Run a [Security Posture](/documentation/security-posture/overview) audit across Firebox controls.
  </Card>

  <Card title="Policy review" icon="broom">
    Review firewall policies and propose cleanups.
  </Card>

  <Card title="Config management" icon="floppy-disk">
    Review the device configuration; apply policy changes on approval.
  </Card>
</CardGroup>

## Before You Start

* A **Collector** deployed on a network that can reach the Firebox management IP over SSH. See [Deploying the agent](/documentation/agent-endpoint-security/installation).
* **SSH management access enabled** on the Firebox (the CLI listens on port `4118`).
* A **device management account** Myrmex can use to log in.

## Step 1 — Create the Access Account in WatchGuard

WatchGuard Firebox devices expose a command-line interface over **SSH on port `4118`**. The credential Myrmex needs is a device management **username and passphrase**.

<Steps>
  <Step title="Enable SSH management access">
    In Fireware Web UI (or Policy Manager), allow **SSH** management access to the Firebox.
  </Step>

  <Step title="Choose the account">
    Use the read-only **Device Monitor** account for analysis, or a **Device Administrator** account to apply changes.
  </Step>

  <Step title="Record the credentials">
    Note the **username** and **passphrase** — you'll enter them in Myrmex.
  </Step>
</Steps>

<Tip>
  Prefer least privilege: use the Device Monitor (read-only) account unless you want the agents to apply changes.
</Tip>

## Step 2 — Add the Integration in Myrmex

From the **Directory**, choose **Add Integration → WatchGuard Firewall**, then fill in:

| Field            | Description                                                                                               |
| ---------------- | --------------------------------------------------------------------------------------------------------- |
| **Name**         | A unique name for this Firebox instance.                                                                  |
| **Description**  | Optional note to identify the device.                                                                     |
| **SSH Host**     | The IP address or hostname of the WatchGuard Firewall.                                                    |
| **SSH Port**     | The SSH port (default `4118`).                                                                            |
| **SSH Username** | The WatchGuard SSH username with admin privileges.                                                        |
| **SSH Password** | The SSH password or passphrase for the user.                                                              |
| **Model**        | The WatchGuard Firebox model series.                                                                      |
| **Version**      | The WatchGuard Fireware OS version.                                                                       |
| **Collector**    | The [Collector](/documentation/agent-endpoint-security/collector-mode) that will open the SSH connection. |
| **Auth Type**    | Connection method (preset to `ssh`).                                                                      |

## Connect

Click **Connect** to validate the SSH connection and finish. The Firebox then appears under **Environment → Integrations**, and you can start asking [Hydra](/documentation/multi-agent-system/integration-specialist-agent) about it in the Workspace.

<Note>
  Your credentials are stored securely and resolved server-side — they never pass through the AI, and Myrmex reads the device on demand rather than storing its data.
</Note>