WatchGuard has been caught doing what a lot of first-timers to access control have done. It had been performing an NTLM hash of the password and thats it. WatchGuard’s firewall appliances are taking a bit of a shortcut when it comes to storing passwords. It’s the typical mistake of recognising that storing plain text passwords is a big no-no, but not going any further than simply hashing the password. In the case, it had been doing nothing wrong.”]
Source: https://informationsecuritybuzz.com/news/a-good-password-can-still-trump-sketchy-security/