About Dell SonicWALL Analyzer 8.1

Transcription

1 Complete Product Name with Trademarks Version Dell SonicWALL Analyzer 8.1 February 2016 These release notes provide information about the Dell SonicWALL Analyzer 8.1 release. Topics: About Pre 8.1 Upgrade Preparation New features Resolved issues Known issues System requirements Upgrading to Analyzer 8.1 About Dell About The Analyzer 8.1 release provides new features and functionality, and fixes a number of known issues from previous releases. See New features and Resolved issues. NOTE: All fixes in the 7.2 Service Packs (SP1, SP2, SP3, SP4, SP5, and 8.0 SP1) are included in this 8.1 release. Pre 8.1 Upgrade Preparation With the release of Analyzer 8.1, the reporting database engine is changed from a MySQL engine to a Postgres engine for data storage known as Rv2 (Reporting Database version 2). This change should have minimum impact on the Reporting functionality with the exception of user input prior to the upgrade. By default, all reporting data as of 8.0 automatically migrates from its current 8.0 data format (MySQL storage) to the 8.1 data format (Postgres storage). The data migration is a time consuming process and it depends on the amount of data stored within the system. The Knowledge Base article mentioned below and the GMS/Analyzer 8.1 Installation FAQ document posted in MySonicWALL Downloads at provide the latest migration information. 1

2 Basically, there are three options you can choose from for data migration: 1 Migrate the Data. No action is required. 2 Migrate the Data but choose the number of months to migrate. This option requires the customer to open the KB and follow its instructions to set the Do you want to migrate the data for the following months: drop-down to Yes, and then set the number of months to migrate from the second drop-down. 3 Do Not Migrate the Data. This option requires the customer to open the KB and follow its instructions to set the Do you want to migrate the data for the following months: drop-down to No. New features This section describes the new features included in the Analyzer 8.1 release: Reporting Database Infobright with Postgres The Analyzer 8.1 upgrade replaces the Infobright- MySQL database formerly used in earlier versions of Analyzer with Infobright-PostgreSQL. The installer will ask if you want to perform the data migration from MySQL to PostgreSQL. For detailed information about controlling data migration, see Analyzer 8.1 Installation and Deployment Requirements The license to distribute Infobright with MySQL, the reporting database used in Analyzer 8.0, expired on Dec 31, Infobright with PostgreSQL replaces it. Support for InfoBright with MySQL will continue and customers who have MySQL deployments as of Dec 31, 2015 will continue to receive upgrades, patches, and hot fixes until Dec 31, They will also be able to add new Agents to the existing deployments. Backup and Restore Performance enhancements Added two new fields to the UMH System > Backup/Restore screen to include Free disk space required, and Auto disk space management. Free disk space required - Indicates the space required to perform the backup, and how much space is available for use on the resource. If available disk space is less than the estimated free disk space required, the backup process will not start. However, if the auto disk space management feature is enabled, the backup process deletes the previous backup files to free the disk space required for the backup process to begin. Auto disk space management - Select to allow Analyzer to manage the disk space and backup requirements. Auto disk space management is a configurable option provided for you to automate recovering disk space by deleting previous backup files in case of a disk space shortage for the backup process. If there is sufficient disk space for the backup process to run, this feature does not have any impact. 2

3 Resolved issues The following is a list of issues addressed in this release. Analyzer Configuration Resolved issue An Analyzer unit's IP address was automatically deleted from the user interface. Occurs when adding a new unit. Issue ID Appliance Resolved issue Scheduled backups (basic/application/complete) do not occur on a GMS Virtual Appliance. Occurs on a newly installed GMS Virtual Appliance. Issue ID Reporting Resolved issue Top Sites and Top User reports return no data. Occurs when creating scheduled reports for these selections under Web Activity and Web Filter. Issue ID Tree Control Resolved issue Users can be locked out of Analyzer. Occurs when the browser becomes slow or when the user has a large number of units. Issue ID Known issues The following is a list of issues known to exist at the time of release. Reports panel Known issue In the Reports > Up/Down Status > Timeline page, the Save button is disabled. Occurs when consecutively saving Up/Down Status reports. VPN Policy names incorrectly appear as ASCII or special characters. Occurs when accessing the Reports panel and navigating to the VPN > Policies page. In the Reports > Gateway Viruses > Blocked page, users are unable to view GAV reports, and no matching records are displayed despite an actual report. Occurs when reports are filtered by clicking the Blocked action. Issue ID

4 System requirements Before installing Analyzer 8.1, ensure that your system meets the following minimum hardware and software requirements. Platform compatibility The release can be hosted in two deployment scenarios as follows: Microsoft Windows Server Software VMware ESX/ESXi Virtual Appliance Deployment Considerations: Before selecting a platform to use for your Analyzer deployment, use the Capacity Calculator 2. This helps you set up the correct Analyzer system for your deployment. CAUTION: Dell SonicWALL recommends that you take steps to minimize abrupt shutdowns of the server hosting Analyzer, as this can cause corruption of the Reporting database, potentially leading to loss of data for the current month. A possible solution includes using an Uninterrupted Power Supply (UPS). Microsoft Windows server operating systems The Dell SonicWALL Analyzer supports the following Microsoft Windows operating systems: Windows Server 2012 Standard 64-bit Windows Server 2012 R2 Standard 64-bit (English and Japanese language versions) Windows Server 2012 R2 Datacenter Windows Server 2008 R2 Datacenter Windows Server 2008 SBS R2 64-bit Windows Server 2008 R2 Standard 64-bit These Windows systems can either run in physical standalone hardware platforms, or as a virtual machine under Windows Server 2008 and 2012 Hyper-V or VMware ESXi. TIP: For best performance and scalability, it is recommended to use a 64-bit Windows operating system. Bundled databases run in 64-bit mode on 64-bit Windows operating systems. All listed operating systems are supported in both virtualized and non-virtualized environments. In a Hyper-V virtualized environment, Windows Server is a guest operating system running on Hyper-V. Analyzer is then installed on the Windows Server virtual machine that is layered over Hyper-V. NOTE: Analyzer is not supported on MS-Windows Server virtual machines running in cloud services, such as Microsoft Azure and Amazon Web Services EC2. 4

5 Hardware requirements Use the Capacity Calculator 2 to determine the hardware requirements for your deployment. NOTE: A Windows 64-bit operating system with at least 8GB of RAM is highly recommended for better performance of reporting modules. (For even better performance, use 16GB memory.) Hard drive HDD specifications The following hard drive HDD specifications are required when using Analyzer software: Hardware requirements Requirement Spindle Speed Cache Transfer rate Average latency Details 7200 and higher 64MB and higher 600MBs or higher 4ms or lower Analyzer virtual appliance supported platforms The elements of basic VMware structure must be implemented prior to deploying the Dell SonicWALL Analyzer Virtual Appliance. SonicWALL Analyzer Virtual Appliance runs on the following VMware platforms: ESXi 4.1, 5.0, 5.1 and 5.5 ESXi 4.0 Update 1 (Build and newer) ESX 4.1 ESX 4.0 Update 1 (Build and newer) Virtual appliance deployment considerations Consider the following before deploying the Analyzer Virtual Appliance: Analyzer management is not supported on Apple MacOS. All modules are 64-bit. Analyzer virtual appliance hardware resource requirements Use the Capacity Calculator 2 to determine the hardware requirements for your deployment. The performance of Analyzer Virtual Appliance depends on the underlying hardware. It is highly recommended to dedicate all the resources that are allocated to the Virtual Appliance, especially the hard-disk (datastore). In environments with high volumes of syslogs, you will need to dedicate local datastores to the Analyzer Virtual Appliance. The Virtual Appliances are 64-bit, which take advantage of additional RAM available to it. A minimum of 4GB RAM is required. However, at least 8GB of RAM is highly recommended for better performance of reporting modules. 5

6 Browser requirements Dell SonicWALL Analyzer uses advanced browser technologies such as HTML5, which are supported in most recent browsers. Dell SonicWALL recommends using the latest Chrome, Firefox, Internet Explorer, or Safari browsers for administration of the Dell SonicWALL Analyzer. This release supports the following Web browsers: Chrome 42.0 and higher (recommended browser for dashboard real-time graphics display) Firefox 37.0 and higher Internet Explorer 10.0 and higher (do not use compatibility mode) NOTE: Internet Explorer version 10.0 in Metro interfaces of Windows 8 is not currently supported. NOTE: Turn off Compatibility Mode when accessing Analyzer sites with Internet Explorer. For more information, see the Knowledge Base article located at: Mobile device browsers are not recommended for Dell SonicWALL Analyzer system administration. NOTE: If using Chrome version 42 and newer to access Analyzer 7.2 and older, you will need to enable NPAPI support in Chrome, which by default has been disabled starting with version 42. Java support NOTE: Java is required only when you are using Net Monitor, or if you want to use the "Login to Unit" right-click menu of TreeControl. Download and install the latest version of the Java 8 plug-in on any system that accesses the Analyzer management interface. This can be downloaded from: or 6

7 Dell SonicWALL appliances supported for Analyzer management supports the following Dell SonicWALL appliances and firmware versions: Component requirements Dell SonicWALL platforms Network security appliance SuperMassive Series SuperMassive 9000 Series NSA Series TZ Series and TZ Wireless Dell SonicWALL SOHO and SOHO Wireless Secure Mobile Access SMA 6200/7200 SRA/SSL-VPN Series E-Class SRA Series Security/Anti-Spam Security Series Dell SonicWALL firmware version SonicOS 6.0 or newer Note: Only partial reporting support is currently available. Contact your Dell SonicWALL Sales representative through for more information. SonicOS 6.1 or newer SonicOS 5.0 or newer SonicOS 5.0 or newer SonicOS or newer SMA or newer SSL-VPN 2.0 or newer (management) SSL-VPN 2.1 or newer (management and reporting) E-Class SRA 9.0 or newer Security 7.2 or newer (management only) Notes: Appliances running firmware newer than this Analyzer release can still generate reports. However, the new features in the firmware release will be supported in an upcoming release of Analyzer. Legacy SonicWALL XPRS/XPRS2, SonicWALL SOHO2, SonicWALL Tele2, and SonicWALL Pro/Pro-VX models are not supported for Dell SonicWALL Analyzer reporting. Appliances running SonicWALL legacy firmware including SonicOS Standard 1.x and SonicWALL legacy firmware 6.x.x.x are not supported for SonicWALL Analyzer reporting. Dell SonicWALL Analyzer can be connected to SSL-VPN 2000 and 4000 appliances. Use the Log > ViewPoint page to set up the Analyzer connection (in addition to the configuration changes made on the Analyzer). In Dell SonicWALL SRA SSL-VPN 5.5 or later firmware versions, a Log > Analyzer page is provided for configuration of Analyzer settings. Upgrading to Analyzer 8.1 This section provides procedures for upgrading an existing Dell SonicWALL Analyzer 8.0 installation to Analyzer 8.1. Upgrading considerations This section provides procedures for upgrading an existing Dell SonicWALL Analyzer 8.0 or newer installation to Analyzer 8.1. Analyzer can be configured for a single server or in a distributed environment on multiple servers. Analyzer 8.1 can be installed as a fresh install or as an upgrade from Analyzer 8.0. If you wish to perform a fresh install of Analyzer 8.1, refer to the Analyzer Getting Started Guide that relates to your Analyzer deployment. 7

8 Consider the following before upgrading to Analyzer 8.1: The 40GB Analyzer Virtual Appliance should be installed in non-production environments only. Examples of non-production environments include those for Proof of Concept (POC), pilot, and demo deployments. Only the 250GB and 950GB virtual appliances are supported in production environments. It is not possible to upgrade a 40GB virtual appliance to a 250GB or 950GB virtual appliance. You need to download the 250GB or 950GB virtual appliance if you are planning to use this software now or in the future for a production environment. In non-production environments, the amount of syslog data collected by the virtual appliance may exceed the 40GB limit, in which case Dell SonicWALL will be unable to support the 40GB virtual appliance. You must disable the User Account Control (UAC) feature on Windows before running the Analyzer installer. In addition, disable Windows Firewall or your personal firewall before running this installer. Analyzer can only be configured for a single server. Upgrading procedure To upgrade to Analyzer 8.1, complete the following steps: 1 Navigate to 2 Download the Analyzer 8.1 software. 3 After the file has downloaded, double-click the file and follow the onscreen instructions. The Installer detects any previous installations of Analyzer. Click Install to proceed with the installation. 4 If you see a Windows Security Alert for Java, click Unblock. The installer displays a progress bar as the files are installed. Wait a few minutes for the installer to finish installing. 5 After the files are installed, whether or not the system has a Personal Firewall such as Windows Firewall enabled, a dialog is displayed notifying you to either disable the firewall or manually open the syslog and SNMP ports, and to ensure that these ports are open on your network gateway or firewall if you plan to use HTTPS Management mode for managing remote appliances (instead of Analyzer Management Tunnel or Existing Tunnel modes). Click OK. Be sure to adjust the settings as recommended. 6 Once the installer has completed, reboot the system to complete the installation. Online training materials Dell SonicWALL Technical Training Services offers Analyzer software for essential security administrator certification. This Certified Dell SonicWALL Security Administrator (CSSA) course provides fundamental instructions to help you understand the basic deployment best practices for Managed Security Service Providers. The following link provides the latest information regarding Dell SonicWALL Analyzer elearning courses: Click Find Your Course and search for Analyzer Certification Training. Related technical documentation Dell SonicWALL reference documentation is available on the Dell Software Support site: 8

9 Datasheets, white papers, and other product information are available on the Dell Software Products website: Knowledge articles and links to related community forums and other resources are available at: Dell SonicWALL Analyzer video training is available from the Analyzer Development Team: About Dell Dell listens to customers and delivers worldwide innovative technology, business solutions and services they trust and value. For more information, visit Contacting Dell Technical support: Online support Product questions and sales: (800) Technical support resources Technical support is available to customers who have purchased Dell software with a valid maintenance contract and to customers who have trial versions. To access the Support Portal, go to The Support Portal provides self-help tools you can use to solve problems quickly and independently, 24 hours a day, 365 days a year. In addition, the portal provides direct access to product support engineers through an online Service Request system. The site enables you to: Create, update, and manage Service Requests (cases) View Knowledge Base articles Obtain product notifications Download software. For trial software, go to Trial Downloads. View how-to videos Engage in community discussions Chat with a support engineer Third-party contributions This product contains third-party components. For third-party license information, go to: Source code information for open-source components is available at: You can find patent information at: 9

10 2016 Dell Inc. ALL RIGHTS RESERVED. This guide contains proprietary information protected by copyright. The software described in this guide is furnished under a software license or nondisclosure agreement. This software may be used or copied only in accordance with the terms of the applicable agreement. No part of this guide may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying and recording for any purpose other than the purchaser s personal use without the written permission of Dell Inc. The information in this document is provided in connection with Dell products. No license, express or implied, by estoppel or otherwise, to any intellectual property right is granted by this document or in connection with the sale of Dell products. EXCEPT AS SET FORTH IN THE TERMS AND CONDITIONS AS SPECIFIED IN THE LICENSE AGREEMENT FOR THIS PRODUCT, DELL ASSUMES NO LIABILITY WHATSOEVER AND DISCLAIMS ANY EXPRESS, IMPLIED OR STATUTORY WARRANTY RELATING TO ITS PRODUCTS INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. IN NO EVENT SHALL DELL BE LIABLE FOR ANY DIRECT, INDIRECT, CONSEQUENTIAL, PUNITIVE, SPECIAL OR INCIDENTAL DAMAGES (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, BUSINESS INTERRUPTION OR LOSS OF INFORMATION) ARISING OUT OF THE USE OR INABILITY TO USE THIS DOCUMENT, EVEN IF DELL HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Dell makes no representations or warranties with respect to the accuracy or completeness of the contents of this document and reserves the right to make changes to specifications and product descriptions at any time without notice. Dell does not make any commitment to update the information contained in this document. If you have any questions regarding your potential use of this material, contact: Dell Inc. Attn: LEGAL Dept 5 Polaris Way Aliso Viejo, CA Refer to our web site (software.dell.com) for regional and international office information. Patents For more information, go to Trademarks Dell, the Dell logo, and SonicWALL are trademarks of Dell Inc. Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products. Dell disclaims any proprietary interest in the marks and names of others. Legend CAUTION: A CAUTION icon indicates potential damage to hardware or loss of data if instructions are not followed. WARNING: A WARNING icon indicates a potential for property damage, personal injury, or death. IMPORTANT NOTE, NOTE, TIP, MOBILE, or VIDEO: An information icon indicates supporting information. Last updated: 2/8/ Rev B 10