SonicWALL Security Dashboard

Transcription

1 Document Scope This document describes how to use the feature on a SonicWALL security appliance running SonicOS 3.8 firmware or later. This document contains the following sections: Overview section on page 2 What is the? section on page 2 Benefits section on page 4 How Does the Work? section on page 5 Platforms section on page 5 Using the section on page 5 Administrator Prerequisites section on page 5 Administrator Configuration Tasks section on page 5 Related Features section on page 14 1

2 Overview Overview This section provides an introduction to the feature. This section contains the following subsections: What is the? section on page 2 Benefits section on page 4 How Does the Work? section on page 5 Platforms section on page 5 After reading the Overview section, you will be familiar with this feature and its benefits. What is the? The provides reports of the latest threat protection data from a single SonicWALL appliance and aggregated threat protection data from SonicWALL security appliances deployed globally. The displays automatically upon successful authentication to a SonicWALL security appliance running SonicOS 3.8 firmware or later, and can be viewed at any time by navigating to the System > Security Dashboard menu in the left-hand menu. Reports in the Security Dashboard include: Viruses Blocked by SonicWALL Network Intrusions Prevented by SonicWALL Network Spyware Blocked by SonicWALL Network Multimedia (IM/P2P) Detected/Blocked by SonicWALL Network 2

3 Overview Each report includes a graph of threats blocked over time and a table of the top blocked threats. Reports, which are updated hourly, can be customized to display data for the last 12 hours, 14 days, 21 days, or 6 months. For easier viewing, reports can be transformed into a PDF file format with the click of a button. Figure 1 provides the default view of the. Figure 1 3

4 Overview Benefits The provides the latest threat protection information to keep you informed about potential threats being blocked by SonicWALL security appliances. If you subscribe to SonicWALL s security services, including Gateway Anti-Virus, Gateway Anti-Spyware, Intrusion Prevention Service (IPS), and Content Filtering Service, you are automatically protected from the threats reported by the. SonicWALL s security services include ongoing new signature updates to protect against the latest virus and spyware attacks. For information about activating SonicWALL security services, refer to the Purchasing Security Services section on page 8. The Security Dashboard provides insight into threats over time, and can be configured to display data from multiple time periods. The can be viewed easily in the System > Security Dashboard page of the SonicWALL appliance management interface, or as a custom generated PDF file. Figure 2 provides a PDF report view of the. Figure 2 PDF Report 4

5 How Does the Work? Using the The provides global and appliance-level threat protection statistics. At the appliance level, threat protection data from your SonicWALL security appliance is displayed. At the global level, the is updated hourly from the SonicWALL backend server with aggregated threat protection data from globally-deployed SonicWALL security appliances. Data provided by the SonicWALL backend server is cached locally for reliable delivery. Note The SonicWALL security appliance must have Internet connectivity to receive the latest threat protection statistics from the SonicWALL backend server, which reports aggregated data from globally deployed SonicWALL security appliances. If you lose connectivity, cached data from the last update will display, and the latest data will not be available until connectivity is restored. Platforms The is available on the SonicWALL security appliances running SonicOS 3.8 firmware and later. Using the This section contains the following subsections: Administrator Prerequisites section on page 5 Administrator Configuration Tasks section on page 5 Administrator Prerequisites SonicWALL security appliances running SonicOS 3.8 firmware or later must be set up and registered on mysonicwall.com. For registration instructions, refer to the SonicWALL Getting Started Guide for your security appliance, available on the Web at: Note The SonicWALL security appliance must be configured for Internet connectivity and be connected to the Internet to display the latest reports. Administrator Configuration Tasks This section contains the following subsections: Configuration Overview section on page 6 Purchasing Security Services section on page 8 5

6 Configuration Overview The can be configured to display global or appliance-level statistics, to display statistics for different time periods, and to generate a custom PDF file. For information about purchasing SonicWALL security services that protect against the threats reported in the, refer to Purchasing Security Services section on page 8. The displays automatically upon successful login to a SonicWALL security appliance. You can access the at any time by navigating to System > Security Dashboard in the left-hand menu. You may see the introductory screen shown in Figure 3 before the dashboard displays. Figure 3 Introductory Screen This section provides the following subsections: Switching to Global or Appliance-Level View section on page 6 Selecting Custom Dates section on page 7 Generating a Security Dashboard PDF section on page 7 Switching to Global or Appliance-Level View To view global reports, select the radio button next to Global in the top of the System > Security Dashboard screen. To view appliance-level reports, select the radio button next to the appliance serial number. 6

7 Selecting Custom Dates The reports default to Last 14 Days, providing an aggregate view of threats blocked during that time period. You can configure each report to one of four optional time periods. Each report can be configured to reflect a different time period. To change a report to reflect a different time period, perform the following steps: Step 1 Step 2 Select the report you want to change: Viruses Blocked by SonicWALL Network Intrusions Prevented by SonicWALL Network Spyware Blocked by SonicWALL Network Multimedia (IM/P2P) Detected/Blocked by SonicWALL Network. Next to the title of the selected report, click the pull-down menu and select one of the following options: Last 12 Hours - The selected report will display threat information from the last 12 hours Last 14 Days - The selected report will display threat information from the last 14 days Last 21 Days - The selected report will display threat information from the last 21 days Last 6 Months - The selected report will display threat information from the last 6 months Generating a Security Dashboard PDF To create a PDF version of the, first select the desired view (global or appliance-level) and the desired time period for each report (the last 12 hours, 14 days, 21 days, or 6 months). Click the button at the top of the page. 7

8 Purchasing Security Services To be protected from the threats reported in the, it is recommended that you purchase SonicWALL security services. This section provides instructions for using the SonicWALL Registration & License Wizard, accessible from the SonicWALL appliance management interface, to purchase SonicWALL security services. SonicWALL security services include the following real-time protection services: Gateway Anti-Virus - Protects against viruses, worms, Trojans and other threats Gateway Anti-Spyware - Protects against new and existing malicious spyware Intrusion Prevention Service - Protects against application-layer attacks Content Filtering Service - Enhances protection and productivity by limiting access to objectionable Web content Dynamic Support 8x5 - Provides one year of telephone and Web support, including software and firmware updates ViewPoint - Provides detailed and comprehensive reporting on network activity Note Your SonicWALL security appliance must be configured for Internet connectivity and must be connected to the Inernet to use the Registration & License Wizard. To purchase SonicWALL security services using the SonicWALL Registration & License Wizard, perform the following steps: Step 1 Log in to the SonicWALL appliance management interface. Step 2 In the left-navigation menu, click Wizards. The Configuration Wizard displays. 8

9 Step 3 Select the radio button next to Registration & License Wizard and click Next. Step 4 The welcome screen displays. Click Next. 9

10 Step 5 If you have a mysonicwall.com account, enter your username and password in the Username and Password fields. If you do not have a mysonicwall.com account, select the radio button next to Create a sonicwall.com account. Click Next. 10

11 Step 6 If you selected Create a sonicwall.com account, the User Registration page displays. Provide the information requested in order to create your account, then click Next. Note If you used an existing mysonicwall.com account by providing your username and password, you will not see this page. Skip to the next step. Step 7 Select the checkbox next to the service you want to purchase and click Next. 11

12 Step 8 A notice displays that a separate browser window will be launched. Click OK. Step 9 The mysonicwall.com page is launched in a separate browser window. Follow the on-screen instructions to complete the purchase of SonicWALL security services. 12

13 Step 10 After you have purchased the security services, return to the wizard window. The License Synchronization window will synchronize the new security services with the SonicWALL security appliance. Click Next to complete the synchronization. Step 11 The Congratulations page displays. You have successfully purchased and synchronized your security services. Click Close to close the wizard. 13

14 Related Features To verify that the security services are licensed, navigate to Security Services > Summary in the left-hand menu and verify that the status of the services is Licensed. For information on advanced configuration for each service, refer to the SonicWALL Administrator s Guides, available on the Web at: Related Features SonicWALL Registration & License Wizard - Use the SonicWALL Registration & License Wizard to purchase SonicWALL security services directly from your SonicWALL security appliance management interface. SonicWALL Security Services - SonicWALL provides a comprehensive offering of security services that protect against the threats reported in the. For a full list, visit the SonicWALL website at Some of the Security Services include: Gateway Anti-Virus - Protects against viruses, worms, Trojans and other threats Gateway Anti-Spyware - Protects against new and existing malicious spyware Intrusion Prevention Service - Protects against application-layer attacks Content Filtering Service - Enhances protection and productivity by limiting access to objectionable Web content Dynamic Support 8x5 - Provides one year of telephone and Web support, including software and firmware updates ViewPoint - Provides detailed and comprehensive reporting on network activity Solution Document Version History Version Number Date Notes 1 12/11/2006 This document was created. 2 6/20/2008 Rev B: Updated for SonicOS 4.0e on TZ 180/ PN Rev B