GMS SonicWALL Global Management System 5.0 Contents Platform Compatibility...1 New Features and Enhancements...2 Known Issues...6 Resolved Issues...6 Installation Procedure...7 Related Technical Documentation...8 Platform Compatibility The SonicWALL GMS 5.0 release supports the following operating systems: Windows 2003 Server (SP1) Windows 2000 Server (SP4) Windows 2000 Professional (SP4) Windows XP Professional (SP2) SonicWALL GMS 5.0 supports the following databases: MySQL version 5.0 for Windows, bundled with SonicWALL GMS 5.0 Microsoft SQL Server 2005 (SP2) Microsoft SQL Server 2000 (SP4) The requirements for the MySQL server are as follows: Windows 2000 (SP4) and above NTFS file system Minimum 6 GB hard disk Minimum 2 GB RAM Not a Virtual Machine (VM) SonicWALL GMS 5.0 automatically downloads the Java Plug-in 1.6 and uses Tomcat 5.5.26. SonicWALL GMS 5.0 supports the following SonicWALL firmware versions: SonicWALL security appliances SonicWALL NSA appliances SonicWALL SSL VPN appliances (all models) SonicWALL SSL VPN appliances (2000/4000 only) SonicWALL CSM series appliances SonicWALL CDP series appliances SonicWALL Aventail Secure Remote Access EX-Series (SSL VPN) appliances SonicWALL Firmware 6.1.2.0 or higher SonicOS Standard 1.0 or higher SonicOS Enhanced 2.0 or higher SonicOS Enhanced 5.0 or higher SonicOS SSL-VPN 1.5.0.3 or higher for basic management SonicOS SSL-VPN 2.1 or higher for SSL VPN Reporting SonicOS CF 1.0 or higher SonicOS CDP 2.3 or higher Version 9.0.0 or higher
New Features and Enhancements This section contains a list of new features and enhancements in the SonicWALL GMS 5.0 release. Database Enhancements and Changes MySQL 5.0 Support SonicWALL GMS 5.0 introduces support for the MySQL 5.0 database for Windows. Only the version of MySQL that is bundled with SonicWALL GMS 5.0 is supported. Removal of Oracle and Solaris Support SonicWALL GMS 5.0 no longer supports the Oracle database and Solaris operating system. Management Features Enhanced User Management SonicWALL GMS 5.0 introduces multiple enhancements in the area of User Management, such as the ability to move users across groups, search for users, and apply unit permissions at user-group level. Domain-level user management support is also introduced. SonicWALL GMS 5.0 replaces the previous user types (Administrators, Operators, End Users, and additional custom user types) with domain level user groups, where users belonging to each domain can view each other and set privileges within the domain, and at the same time, remain isolated from users of other domains. Third-Party Authentication Server Support SonicWALL GMS 5.0 supports third-party authentication servers, including LDAP and Active Directory. Search Function Spanning Multiple Pages SonicWALL GMS 5.0 provides a generic search bar to search Policy panel screen items that span multiple pages, such as Address Objects or Rules. Enhanced Search in GMS Logs SonicWALL GMS 5.0 provides the ability to search through GMS application logs using multiple phrases. Reporting Features Custom Reports SonicWALL GMS 5.0 provides the Custom Reports feature that lets you filter raw syslog data to generate granular reports customized by date and time ranges and by highly flexible data filters customized for your own needs. In the Internet Activity custom report, you can see the date and time down to the second of all Internet activity passing through a monitored SonicWALL security appliance, and view detailed information not available in reports generated from summarized data. Enhanced No Data Messages The No Data message is often displayed when a report is not available. SonicWALL GMS 5.0 displays the most likely reason for the lack of data and points you to the screen where you can make the necessary adjustments. 2
Best Practices Notification If the selected appliance does not have a valid subscription for the service you ve requested, a sample report is displayed with information about that service and how to get it, along with links to the global SonicWALL dashboard report. This feature is available for Virus Attacks, Anti-Spyware, and Intrusion Prevention reports. Firewall Down-Time Reports SonicWALL GMS 5.0 introduces new reports for SonicWALL security appliances, available on the Firewalls tab: The Down-Time Summary report displays the amount of time the selected SonicWALL appliances were offline and unavailable during each hour of the day. The Down-Time Over Time report shows how often selected appliances were unavailable during a specified time period. Appliance Subscription Status in Scheduled Reports All scheduled reports include the status of any subscription services licensed on the appliance(s) that are expiring within the next 7 or 30 days, or which have expired within the past 7 or 30 days. Web Event Consolidation For faster performance and better database/hard disk usage, SonicWALL GMS 5.0 provides the ability to consolidate multiple syslog messages pertaining to a single activity (such as access to www.cnn.com) as a single event. Syslog Tail Filters In SonicWALL GMS 5.0, you can now use regular expressions to filter real-time syslog output. Password Protection of PDF Reports When configuring scheduled reports, SonicWALL GMS 5.0 allows password protection of reports in PDF format. Additional Currency Types in Bandwidth Cost SonicWALL GMS 5.0 supports more than 20 different currencies from around the world, which can be configured in the summarizer settings page. The selected currency is used in Bandwidth reports that include the cost of bandwidth. Log Entry Enhancements for Report Data Summarized Report Data Summarized log entries include the number of syslog messages that were processed and the amount of time required for the summarization to complete. For example, a log entry might be: Report data summarized. 469,500 messages processed in 40.70 minutes. Scheduled Reports for Bandwidth Usage Between Interfaces You can generate Bandwidth Usage reports between interfaces by entering a source and destination. Click Configure Filters/Options at the bottom of the Scheduled Report Configuration window to specify the interfaces. Failed Login Reports Include Failed Admin and LDAP User Login Attempts SonicWALL GMS 5.0 includes failed login attempts for admin and for users authenticated over LDAP in Failed Logins reports. 3
Monitoring Features SonicToday SonicWALL GMS 5.0 introduces a new SonicToday panel in the management interface. The SonicToday panel can be configured to display any of the following in real time: Monitors for GMS logs, scheduled tasks, or current sessions Headline news links and RSS feeds from Web sites of your choice Alerts for events relating to bandwidth usage, database size, number of attacks of various types, unit status, or VPN tunnel status WAN Failover Alerts In SonicWALL GMS 5.0, configurable alerts for notification of WAN failovers can be emailed to the administrator. Configurable Database Threshold Alerts SonicWALL GMS 5.0 provides two new status alert types: Database Size and Database Log Size. Both of these can be configured to adjust the size threshold for the alert and the destination and schedule for sending the alert. Event Severity Color Palette SonicWALL GMS 5.0 replaces the RGB and Hex color settings with a color palette for ease of use when adding a new severity from the Console > Events > Severity screen. Installer Enhancements Syslog Collection Continues During Installation or Upgrade In previous versions of SonicWALL GMS, the installation or upgrade installer automatically stopped the syslog collector, causing a syslog storm upon restart. This proved problematic for users with remote access to the SonicWALL GMS system. SonicWALL GMS 5.0 continues to listen for syslog packets being transferred remotely when the syslog collector is stopped during the installation or upgrade process. Applet Jar File Uses Current System Timestamp A new feature with the TreeControl Applet Jar file is that the timestamp is now updated to the current system timestamp. You will notice that other files also have timestamps, which are the build times, not the current time. This new change of the timestamp is significant: It allows users to download the latest Applet Jar file and see the newest upgraded features once the SonicWALL GMS application is accessed. Phase-2 Installer Verifies Database Consistency In a fresh installation of SonicWALL GMS 5.0, the Phase-2 installer will check for consistency between the database host and URL entries. These entries are used by MySQL and Microsoft SQL to access the database for upgrades: they must be consistent in order for the databases to communicate with each other. Installer Provides Personal Firewall Alert An alert will remind you at the end of SonicWALL GMS 5.0 installation or upgrade that your personal firewall may block incoming syslog packets and SMTP traps. The firewall may also prevent certain functions of SonicWALL GMS 5.0 from working properly. 4
Miscellaneous Enhancements Database Entries in sgmsconfig.xml Database connectivity entries, such as dbusername, dbhost, dburl, and dbpassword are configured only in sgmsconfig.xml; they no longer need to be configured in web.xml. Searches Provide Auto Suggestions SonicWALL GMS 5.0 introduces auto suggestion in search fields throughout most of GMS. This feature remembers search terms that you have recently made and suggests a list of possible matches. Syslog Collector and Scheduler Listen on All Interfaces The SonicWALL GMS syslog collector and scheduler services no longer bind to interface cards or IP addresses provided during installation. Instead, SonicWALL GMS 5.0 listens on all interfaces for traffic. This allows the syslog collector to collect messages from any interface, while the scheduler monitors appliances. 5
Known Issues The following are known issues in the SonicWALL GMS 5.0 release: Symptom Condition / Workaround Issue The GMS help icon and associated hyperlink is not working on the SonicToday main page; it points to itself locally as the URL site for on-line help. Occurs when the user attempts to access Help on the SonicToday page. 70368 A user with administrator privileges on a remote domain can delete a user account from the Administrators group on LocalDomain. SonicWALL GMS does not generate PDF versions of reports when attempting to generate By Site and By User report types. When subscription services are scheduled to receive reports on next Expiring or already Expired services, it does not include services with a free 30-day trial; only Licensed Services are included. Reports for Anti-Spyware display information for Virus Attacks instead. Attempting to generate an XML report does not work. GMS cannot be used to manage the Application Firewall capabilities of SonicOS 4.0 Enhanced and above. The report Web Usage: By User has a field Number of Hits in the main row that does not match the number of hits in the detailed information. Occurs when the remote user uses the command line interface (CLI). Occurs on the Firewall > Reports > Configuration > Scheduled Reports > Add Scheduled Report page when the By Site or By User report types are selected. Workaround: Generate HTML reports instead of PDF. Occurs when a scheduled report is configured for Add an Scheduled Report for Subscription Services Expiring in Next 30 Days and an appliance on the SonicWALL GMS has a free 30-day trial. Occurs when attempting to generate an Anti-Spyware report for an appliance that does not have an Anti- Spyware license. Occurs when attempting to generate a report in XML format for Subscription Services Expiring or Subscription Services Expired. Occurs when GMS is managing a UTM appliance that supports Application Firewall. Occurs when certain hits are not counted in the detailed information field, resulting in an inconsistency between the reports. 70075 69406 68210 67071 66161 53522 49002 Resolved Issues The following issues are resolved in the SonicWALL GMS 5.0 release: Symptom Condition / Workaround Issue Authentication reports for Aventail SSL- VPN devices in GMS are not available. A report with No Data Found will be displayed as a result. Condition: Occurs when viewing reports for Aventail appliances with firmware 9.0.0. Occurs when viewing reports for Aventail appliances with firmware 9.0.0. Workaround: Apply the latest hotfix to the Aventail appliance to correct this issue. Check the Aventail Knowledge Portal, reachable by logging in to www.mysonicwall.com, for instructions on downloading the latest hotfix. 63786 6
Installation Procedure You can either perform a fresh installation of SonicWALL GMS 5.0 using the installer, or upgrade a previous installation of SonicWALL GMS 4.1.x. To upgrade to SonicWALL GMS 5.0 from a version of GMS prior to 4.1, you must first upgrade to SonicWALL GMS 4.1, and then run the SonicWALL GMS 5.0 installation. For a fresh installation of SonicWALL GMS 5.0, you must install MySQL first. For complete information about installing SonicWALL GMS 5.0 and MySQL, refer to the SonicWALL GMS 5.0 Getting Started Guide available at: http://www.sonicwall.com/us/support.html Version of SonicWALL GMS Upgrade Path to SonicWALL GMS 5.0 4.1 Use SonicWALL GMS 5.0 4.1.2 Use SonicWALL GMS 5.0 In a distributed environment, make sure you stop all GMS services on all SonicWALL GMS servers before performing an upgrade. Installation Notes If the SonicWALL GMS Console (Web server) is set up for HTTPS management, the upgrade to GMS 5.0 will preserve the HTTPS settings for the GMS Web server. The upgrade installer checks with the SonicWALL license manager to verify that the GMS deployment has a valid support contract. If it does not, then the upgrade discontinues. When the GMS installer detects that the SonicWALL license manager is not accessible, it prompts the user to enter an Upgrade Key. If the key is valid, it allows the upgrade to continue; if not, the installation fails. The installation folder path name should not contain spaces. 7
Related Technical Documentation SonicWALL documentation is available in the SonicWALL Technical Documentation Online Library: http://www.sonicwall.com/us/support.html For basic and advanced deployment examples, refer to SonicWALL guides and technotes available on the Web site. P/N: 232-001560-00 Rev A Last updated: 7/22/2008 8