232-003116-00 RevA Analyzer 8.1 Software GettingStartedGuide

8/18/2019 232-003116-00 RevA Analyzer 8.1 Software GettingStartedGuide

1/35

Dell SonicWALL™ Analyzer 8.1 SoftwareGetting Started Guide


2/35

© 2015 Dell Inc. ALL RIGHTS RESERVED.This guide contains proprietary information protected by copyright. The software described in this guide is furnished under asoftware license or nondisclosure agreement. This software may be used or copied only in accordance with the terms of theapplicable agreement. No part of this guide may be reproduced or transmitted in any form or by any means, electronic ormechanical, including photocopying and recording for any purpose other than the purchaser’s personal use without the writtenpermission of Dell Inc.

The information in this document is provided in connection with Dell products. No license, express or implied, by estoppel orotherwise, to any intellectual property right is granted by this document or in connection with the sale of Dell products. EXCEPTAS SET FORTH IN THE TERMS AND CONDITIONS AS SPECIFIED IN THE LICENSE AGREEMENT FOR THIS PRODUCT, DELL ASSUMES NOLIABILITY WHATSOEVER AND DISCLAIMS ANY EXPRESS, IMPLIED OR STATUTORY WARRANTY RELATING TO ITS PRODUCTSINCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, ORNON-INFRINGEMENT. IN NO EVENT SHALL DELL BE LIABLE FOR ANY DIRECT, INDIRECT, CONSEQUENTIAL, PUNITIVE, SPECIAL ORINCIDENTAL DAMAGES (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, BUSINESS INTERRUPTION OR LOSSOF INFORMATION) ARISING OUT OF THE USE OR INABILITY TO USE THIS DOCUMENT, EVEN IF DELL HAS BEEN ADVISED OF THEPOSSIBILITY OF SUCH DAMAGES. Dell makes no representations or warranties with respect to the accuracy or completeness ofthe contents of this document and reserves the right to make changes to specifications and product descriptions at any timewithout notice. Dell does not make any commitment to update the information contained in this document.

If you have any questions regarding your potential use of this material, contact:

Dell Inc. Attn: LEGAL Dept 5 Polaris Way Aliso Viejo, CA 92656

Refer to our website ( software.dell.com ) for regional and international office information.Patents

For more information, go to http://software.dell.com/legal/patents.aspx .

Trademarks

Dell, the Dell logo, and SonicWALL are trademarks of Dell Inc. Other trademarks and trade names may be used in this documentto refer to either the entities claiming the marks and names or their products. Dell disclaims any proprietary interest in themarks and names of others.

Analyzer Getting Started Guide Updated - December 2015 Software Version - 8.1 232-003116-00 Rev A

Legend

CAUTION: A CAUTION icon indicates potential damage to hardware or loss of data if instructions are not followed.

WARNING: A WARNING icon indicates a potential for property damage, personal injury, or death.

IMPORTANT NOTE, NOTE, TIP, MOBILE, or VIDEO: An information icon indicates supporting information.

http://software.dell.com/http://software.dell.com/legal/patents.aspxhttp://software.dell.com/legal/patents.aspxhttp://software.dell.com/


3/35

Dell SonicWALL Analyzer 8.1 SoftwareGetting Started Guide

1

3

Overview

This Getting Started Guide contains installation procedures and configuration guidelines for deploying the DellSonicWALL Analyzer Software on a server on your network. The Analyzer Software is a Web-based applicationthat can generate dynamic real-time and historical reports for a complete view of all activity through DellSonicWALL security appliances.

This Getting Started Guide contains the following sections:

• Before You Begin on page 4

• System Requirements on page 4

• Record Configuration Information on page 6

• Introduction to the Management Interfaces on page 8

• Overview of the Two Interfaces on page 8

• Switching Between Management Interfaces on page 9

• UMH System Interface Introduction on page 9

• Management Interface Introduction on page 9

• Installing and Upgrading on page 13

• Fresh Install Using Universal Management Suite on page 13

• Upgrading From an Earlier Version of Dell SonicWALL Analyzer on page 17

• Registering and Licensing on page 19• Registering/Licensing After a Fresh Install on page 19

• Configuring UMH Deployment Options on page 21

• Configuring the Deployment Role on page 22

• Configuring Deployment Settings on page 23

• Controlling Deployment Services on page 26

• Provisioning and Adding Units on page 27

• Provisioning a Dell SonicWALL Firewall Appliance on page 27

• Provisioning a Dell SonicWALL SRA SMB Appliance on page 28

• Provisioning a Dell SonicWALL E-Class SRA Series Appliance on page 29• Adding Dell SonicWALL Appliances on page 30

• Support on page 32

• Related Technical Documentation on page 32

• Live Product Demos on page 33


4/35


2

4

Before You Begin

See the following sections for information about system requirements for the Dell SonicWALL Analyzer Software:

• System Requirements on page 4

• Record Configuration Information on page 6

System RequirementsThe Dell SonicWALL Analyzer Software comes with a base license to manage either 5, 10, or 25 nodes. You canpurchase additional licenses on MySonicWALL. For more information on licensing additional nodes, visit:

http://www.sonicwall.com/us/en/products.html

Before installing, review the requirements in the following sections:

Operating System RequirementsThe Dell SonicWALL Analyzer Software supports the following Microsoft Windows operating systems:

• Windows Server 2012 Standard 64-bit

• Windows Server 2012 R2 Standard 64-bit (English and Japanese language versions)

• Windows Server 2012 R2 Datacenter

• Windows Server 2008 R2 Datacenter

• Windows Server 2008 SBS R2 64-bit

• Windows Server 2008 R2 Standard 64-bit

• Windows 8.1 64-bit

• Windows 7 64-bit

These Windows systems can either run in physical standalone hardware platforms, or as a virtual machine underWindows Server 2008 and 2012 Hyper-V or VMware ESXi.

NOTE: Dell SonicWALL Analyzer Software is not supported on laptops or tablets.

TIP: For best performance and scalability, it is recommended to use a 64-bit Windows operating system.Bundled databases run in 64-bit mode on 64-bit Windows operating systems. All listed operating systemsare supported in both virtualized and non-virtualized environments. In a Hyper-V virtualized environment,Windows Server is a guest operating system running on Hyper-V. Analyzer is then installed on the WindowsServer virtual machine that is layered over Hyper-V.

NOTE: Analyzer is not supported on MS-Windows Server virtual machines running in cloud services, such asMicrosoft Azure and Amazon Web Services EC2.

http://www.sonicwall.com/us/Products_Solutions.htmlhttp://www.sonicwall.com/us/Products_Solutions.html


5/35

Dell SonicWALL Analyzer 8.1 SoftwareGetting Started Guide 5

Hardware Requirements for Windows ServerUse the Capacity Calculator 2 to determine the hardware requirements for your deployment.

MySQL RequirementsPreviously, Analyzer automatically installed MySQL as part of the base installation package. The Analyzer 8.1upgrade replaces the Infobright with MySQL database formerly used in earlier versions with Infobright withPostgres (IB-PG). The installer will ask if you want to perform the data migration to the new database.Separately installed instances of MySQL are not supported with the Analyzer Virtual Appliance.

Browser RequirementsDell SonicWALL Analyzer uses advanced browser technologies such as HTML5, which are supported in most

recent browsers. Dell SonicWALL recommends using the latest Chrome, Firefox, Internet Explorer, or Safaribrowsers for administration of the Dell SonicWALL Analyzer.

This release supports the following Web browsers:

• Chrome 42.0 and higher (recommended browser for dashboard real-time graphics display)

• Firefox 37.0 and higher

• Internet Explorer 10.0 and higher (do not use compatibility mode)

Network RequirementsTo complete the Analyzer deployment process documented in this guide, the following network requirementsmust be met:

• The Dell SonicWALL Analyzer server must have access to the Internet

• The Dell SonicWALL Analyzer server must have a static IP address

• The Dell SonicWALL Analyzer server’s network connection must be able to accommodate at least 1 KB/sfor each device under management. For example, if Global Management System is monitoring 100SonicWALL appliances, the connection must support at least 100 KB/s.

TIP: A Windows 64-bit operating system with a RAM of at least 16GB of RAM is highly recommended forbetter performance of reporting modules.

NOTE: Internet Explorer version 10.0 in Metro interfaces of Windows 8 is not currently supported.

NOTE: Turn off Compatibility Mode when accessing the Analyzer management interface withInternet Explorer. For more information, see the Knowledge Base article located at:https://support.software.dell.com/sonicwall-gms/kb/sw14003

NOTE: Depending on the configuration of Dell SonicWALL log settings and the amount of traffic handled byeach device, the network traffic can vary dramatically. The 1 KB/s for each device is a generalrecommendation. Your installation requirements may vary.

https://support.software.dell.com/sonicwall-gms/kb/sw14003https://support.software.dell.com/sonicwall-gms/kb/sw14003https://support.software.dell.com/sonicwall-gms/kb/sw14003https://support.software.dell.com/sonicwall-gms/kb/sw14003http://www.sonicwall.com/us/en/products/GMS_Software.html#tab=gmsCapCalc2


6/35


Dell SonicWALL Appliance and Firmware Support

Record Configuration InformationBefore continuing, record the following configuration information for your reference.

Table 1. Component Requirements

Dell SonicWALL Platforms Dell SonicWALL Firmware Version

Network Security Appliance

SuperMassive 10000 Series SonicOS 6.0 or newer• NOTE: Only partial reporting support is currently available.

Contact your Dell SonicWALL Sales representative for moreinformation.

SuperMassive 9000 Series SonicOS 6.1 or newer

NSA Series SonicOS 5.0 or newer

TZ and TZ Wireless Series SonicOS 5.0 or newer

Dell SonicWALL SOHO and SOHOWireless

SonicOS 5.9.1.3 or newer

Secure Mobile Access

SRA/SSL-VPN Series SonicOS SSL-VPN 2.0 or newer (management)

SonicOS SSL-VPN 2.1 or newer (management and reporting)E-Class SRA Series E-Class SRA 9.0 or newer

SMA 6200/7200 SMA 10.7.2 or newer

Email Security/Anti-Spam

Email Security Series Email Security 7.2 or newer (management only)

NOTE: Appliances running firmware newer than this Analyzer release can still generate reports. However,the new features in the firmware release will be supported in an upcoming release of Analyzer.

NOTE: Legacy SonicWALL XPRS/XPRS2, SonicWALL SOHO2, SonicWALL Tele2, and SonicWALL Pro/Pro-VXmodels are not supported for Dell SonicWALL Analyzer reporting. Appliances running SonicWALL legacyfirmware including SonicOS Standard 1.x and SonicWALL legacy firmware 6.x.x.x are not supported for

SonicWALL Analyzer reporting.NOTE: Dell SonicWALL Analyzer can be connected to SSL-VPN 2000 and 4000 appliances. Use the Log >View Log page to set up the Analyzer connection (in addition to the configuration changes made on theAnalyzer). In Dell SonicWALL SRA SSL-VPN 5.5 or later firmware versions, a Log > Analyzer page isprovided for configuration of Analyzer settings.

SMTP Server Address : The IP address or host name of your Simple Mail Transfer Protocol (SMTP) server.For example, mail.emailprovider.com.

HTTP Web Server Port : The number of your Web server port if customized. The default port is 80.

HTTPS Web Server Port : The number of your secure (SSL) Web server port if customized. The default portis 443.

Administrator Email 1 : The email address of an Analyzer administrator who receives email notifications.

Administrator Email 2 : The email address of an additional Analyzer administrator who receives emailnotifications. This f ield is optional.

Sender Email Address : The email address from which the email notifications are sent.


7/35


*This information is needed if Microsoft SQL Server is used, or in the case of a distributed deployment.

Database User : The MySQL user name for the database administrator. This is not required whenusing the bundled database on this server.*

Database Password : The MySQL password for the database administrator. This is not required whenusing the bundled database on this server.*


8/35


9/35


10/35


11/35


Management InterfaceThe Analyzer Software management interface is the main control panel. The management interface allows youto add and modify appliances, perform monitoring and reporting tasks, and configure Analyzer Softwaresettings.

Firewall PanelThe Firewall Panel is an essential component of network security that is used to view and schedule reportsabout critical network events and activity, such as security threats, inappropriate Web use, and bandwidthlevels. To open the Firewall Panel, click the Firewall tab at the top of the Analyzer user interface.

The management interface offers the following navigation features:

• Navigation Tabs on page 11

• Left Pane on page 11

• Center Pane on page 12

• Right Pane on page 12

• Understanding Analyzer Icons on page 12

Navigation TabsThe Dell SonicWALL Analyzer management interface navigation tabs are located at the top of the managementinterface.

The navigation tabs are: Dashboard , Firewall , Monitor , and Console . The Monitor tab provides real-timemonitoring at the global, group, or appliance level. The Console tab provides tools to customize options foundin the other Analyzer tabs and to manage Analyzer Software settings that affect the environment globally.

Left PaneThe left pane of the Analyzer management interface provides a tree control that displays the current DellSonicWALL Analyzer Software view and a list of managed appliances within the current tab. The left pane is only

http://-/?-http://-/?-http://-/?-http://-/?-http://-/?-http://-/?-http://-/?-http://-/?-http://-/?-http://-/?-http://-/?-http://-/?-http://-/?-http://-/?-http://-/?-http://-/?-http://-/?-http://-/?-http://-/?-http://-/?-


12/35


displayed for the Firewall , SMA appliance tabs. The current category and view are indicated by a bluehighlighting. The left pane tree control provides the ability to switch between views and displays the currentstate of each appliance under management. A single box in the tree control indicates a node at appliance orunit level. Two boxes in the tree control indicates a node at a group level. A global node at the top of the treecontrol is indicated by a three-box icon. The color and additional images superimposed on these icons provideuseful status information. For detailed information about appliance states, refer to Understanding AnalyzerIcons on page 12.

Center PaneThe center pane displays in the appliance tabs: Firewall and SMA. A navigational tree control that providesaccess to the configuration options available based on the navigational tab and left pane selections. At the topof the Center pane there are two sub-tabs:

• Policies – Provides policy configuration options for managed appliances.

• Reports – Provides reporting on the global, group, or appliance level, and is only available for Firewalland SMA.

The current selection in the center pane is indicated by the highlighted item. The center pane options changebased on the navigational tab and left pane selections, and selections in the center pane modify the display inthe right pane.

Right PaneThe right pane displays the available status or tasks based on the current selection of navigational tab, leftpane and center pane options. Configurations performed in the right pane modify global or appliance settings.For example, the right pane displays the status and tasks available for the Policies navigation tab, left paneselection GlobalView, and center pane selection System > Status.

Understanding Analyzer IconsThis section describes the meaning of icons that appear next to managed appliances listed in the left pane ofthe Dell SonicWALL Analyzer Software management interface.

NOTE: If there is only one appliance visible in the Left Pane, then the Left Pane automatically collapses topresent a larger screen for the rest of the UI.

Appliance Status Description

One blue box indicates that the appliance is operating normally. The appliance isaccessible from Dell SonicWALL Analyzer, and no tasks are pending or scheduled.

Three blue boxes indicate that all appliances in the global group of this type(Firewall/SMA) are operating normally.

http://-/?-http://-/?-http://-/?-http://-/?-http://-/?-http://-/?-


13/35


4

13

Installing and Upgrading

This section provides procedures for a installing the Dell SonicWALL Analyzer Software and upgrading the DellSonicWALL Analyzer Software from a previous version. The Analyzer Software can only be configured for a singleserver.

Topics:

• Fresh Install Using Universal Management Suite on page 13

• Upgrading From an Earlier Version of Dell SonicWALL Analyzer on page 17

Fresh Install Using Universal ManagementSuiteIn Dell SonicWALL Analyzer, all software components related to GMS and Analyzer, including the MySQLdatabase, executable binary files for all Analyzer services, and other necessary files, are installed using theUniversal Management Suite single-binary installer. All GMS and Analyzer files are installed as the UniversalManagement Suite, but no distinction is made between GMS and Analyzer during the installation. The initial

installation phase takes just a few minutes for any type of installation, such as GMS server, Analyzer server,database server, or any other role.

To do a f resh inst a l l o f t he Universa l Management Sui t e f r om t he single b inary inst a l le r,comple te t he fo l lowi ng st eps:

1 Log in to your Dell SonicWALL Analyzer management computer as administrator (Windows).

2 Launch the Dell SonicWALL Universal Management Suite installer, by:

a Right-clicking the file sw_gmsvp_win_eng_ n. n . x x x x . x x x x .exe (where n.n represents therelease number and xxxx represent the exact version numbers).

b Selecting Run as administrator .

It can take several seconds for the InstallAnywhere self-extractor to initialize.

NOTE: You must disable the User Account Control (UAC) feature on Windows before running the DellSonicWALL Analyzer Software installer. In addition, disable Windows Firewall or your personal firewallbefore running this installer.


14/35


3 In the Introduction dialog, click Next .

4 In the License Agreement dialog, select the radio button next to I accept the terms of the LicenseAgreement .

5 Click Next .

6 Select the path to the folder where you would like to install the files:

• Accept the default path, C:\GMSVP.

• Type in a new path.

NOTE: Do not include spaces in the installation path.


15/35


16/35


12 If you see a Windows Security Alert for Java, click Unblock .

The installer displays a progress bar as the files are installed. Wait a few minutes for the installer tofinish installing.

After the files are installed, whether or not the system has a Personal Firewall such as Windows Firewallenabled, a dialog is displayed notifying you to either disable the firewall or manually open the syslog andSNMP ports, and to ensure that these ports are open on your network gateway or firewall if you plan touse HTTPS Management mode for managing remote appliances (instead of Management Tunnel orExisting Tunnel modes). It also mentions that it you have AntiVirus software running on your system, youneed to exclude the folders associated with this product from being scanned by the AntiVirus Software.

13 Click OK .

14 Be sure to adjust the settings as recommended.

The Important Registration Information screen provides the URL and credentials to use to log in to theAnalyzer Universal Management Host system interface after restarting your system:

The default URL for accessing the interface from the local system is:

ht t p: / / l ocal host : 80/

The default credentials are:

User name —admin

Password — password


17/35


To register a Analyzer Software installation, use the 12-character serial number that you received whenyou purchased this product.

15 Click Next .

16 In the Installation Complete screen, select Yes, restart my system to restart your system immediately,or select No, I will restart my system myself to restart your system later. Click Done .

17 After restarting your system, you can access the Dell SonicWALL UMH system interface to register theproduct and configure the Analyzer server settings on this system.

Access the Analyzer Software UMH system interface by either;

• Clicking on the new desktop shortcut for Dell SonicWALL Universal Management Suite (yourdefault Web browser launches ht t p: / / l ocal host / appl i ance/ l ogi n) .

• Pointing your browser to ht t p: / / l ocal host / .

18 Log in using the these credentials:

username —admin

password — password

You are prompted to change your password.

To register and license Dell SonicWALL Analyzer Software, see Registering/Licensing After a Fresh Install on page19.

Upgrading From an Earlier Version of DellSonicWALL AnalyzerYou can use the Dell SonicWALL UMS installer to upgrade the Dell SonicWALL Analyzer Software.

It is highly recommended that you backup your database, Analyzer installation folders, and the “\conf\sgmsConfig.xml” file on the Analyzer server prior to performing the Analyzer Softwareupgrade.

To upgrade the Dell SonicWALL Analyzer Software, complete the following steps:

1 Log on to your Dell SonicWALL Analyzer management computer as administrator (Windows).

2 Launch the Dell SonicWALL Universal Management Suite installer, by double-clicking the filesw_gmsvp_win_eng_ n. n . x x x x . x x x x .exe (where n.n is the release number and xxxx are the exactversion numbers). It might take several seconds for the InstallAnywhere self-extractor to initialize.

3 In the Introduction screen, click Next .

4 In the License Agreement screen, select the radio button next to I accept the terms of the License

Agreement .5 Click Next .

6 Wait while the installer prepares to install Dell SonicWALL UMS on your system.

7 Click Install to upgrade your installation. The Installer detects the previous installation of AnalyzerSoftware.

8 Click Install to proceed with the upgrade.

9 If you see a Windows Security Alert for Java, click Unblock .

10 The installer displays a progress bar as the files are installed. Wait a few minutes for the installer tofinish installing.

NOTE: You are forced to change your password the first time you login.


18/35


11 After the files are installed, whether or not the system has a Personal Firewall such as Windows Firewallenabled, a dialog is displayed notifying you to either disable the firewall or manually open the syslog andSNMP ports, and to ensure that these ports are open on your network gateway or firewall if you plan touse HTTPS Management mode for managing remote appliances (instead of Management Tunnel orExisting Tunnel modes). Click OK . Be sure to adjust the settings as recommended.

12 The final installer screen contains the path of the installation folder, and warns you that the Universal

Management Suite Web page will be launched next. Click Done .


19/35


20/35


4 The Login page reloads to force a password change. Type a new password into both the New Password and Confirm New Password fields,

5 Click Submit .

6 If the software detects that the Windows Firewall is enabled on the system, a warning dialog box isdisplayed on top of the System > Status page. You can do one of these:

• To receive syslog and SNMP packets, either:

• Disable the Windows Firewall

• Configure it to open these ports (default syslog port is UDP 514 and default SNMP port isUDP 162).

• Select Perform this check after 30 days if you do not plan to disable the Windows Firewallimmediately, and do not wish to see this warning every time you login. The check for WindowsFirewall cannot be disabled completely, and if you leave it running you will see this alert after the30-day delay. You can repeat the delay as many times as needed.

7 When ready, click OK .

8 On the System > Status page, the Registration Pending notification across the top of the screenindicates that the system is not registered, the Serial Number status is UNKNOWN, and the Licensestatus displays Not Licensed . To begin registration, click Register in the top, right corner.

9 On the License Management page, type your MySonicWALL user name and password into the appropriatefields.

10 Click Submit .

11 In the next License Management page, type ANALYZER (all capital letters) into the Serial Number field

and leave the Authentication Code fields blank.12 Type a friendly name for the system into the Friendly Name field. The friendly name is displayed on

MySonicWALL to more easily identify the installation on this system.

13 Click Submit , the License Management page displays a completion screen.

14 Click Continue , the License Management page displays license summary information.

When registration is complete, the Deployment > Roles page is displayed. Although there is only one possiblerole for a Analyzer Software deployment, you must still configure certain fields on this page and then clickUpdate to fully activate the application. For instructions on configuring these settings, see the Configuring UMHDeployment Options on page 21.

NOTE: If you do not have a MySonicWALL account, you must create one before continuing.


21/35


6

21

Configuring UMH Deployment Options

The Analyzer single server configuration (default) is an All in One role and is the only role available for Analyzer.All services of Analyzer run on a single server, including the MySQL database. The role assigned to your DellSonicWALL Analyzer Software defines the Dell SonicWALL Universal Management Suite services that it provides.The following Dell SonicWALL Universal Management Suite services run in the Analyzer “All in One” system:

• Database

• Reports Database

• Reports Scheduler

• Reports Summarizer

• Scheduler

• Syslog Collector

• Update Manager

• Web Server

Topics:

• Configuring the Deployment Role on page 22

• Configuring Deployment Settings on page 23

• Controlling Deployment Services on page 26


22/35


23/35


Configuring Deployment SettingsThis section describes the UMH Deployment > Settings page that is used for Web port, SMTP, and SSL accessconfiguration.

Topics:

• Configuring Web Server Settings on page 23

• Configuring SMTP Settings on page 24

• Configuring SSL Access on page 25

Configuring Web Server SettingsThe Web Server Set t ings configurat ion is lar gely t he same on any role:

1 Navigate to Deployment > Settings > Web Server Settings in the / appl i ance management interface.

2 To use a different port for HTTP access to Analyzer, type the port number into the HTTP Port field. Thedefault port is 80.

If you enter another port in this field, the port number must be specified when accessing the appliancemanagement interface or Analyzer Software management interface. For example, if port 8080 is enteredhere, the appliance management interface would be accessed with the URL:

ht t p: / / : 8080/ appl i ance/

3 To use a different port for HTTPS access to Analyzer, type the port number into the HTTPS Port field.The default port is 443.

If you enter another port in this field, the port number must be specified when accessing the appliancemanagement interface or Analyzer Software management interface. For example, if port 4430 is enteredhere, the appliance management interface would be accessed with the URL:

ht t ps: / / : 4430/ appl i ance/

4 Click Enable HTTPS Redirection to redirect HTTP to HTTPS when accessing the Analyzer managementinterface.

5 In the Public IP text-field, enter the public IP or FQDN of the outside web services.

6 When you are finished configuring the Web Server Settings, click Update .


24/35


Configuring SMTP SettingsThe SMTP Configuration section allows you to configure an SMTP server name or IP address, a sender emailaddress, and an administrator email address. You can test connectivity to the configured server.

To confi gure SMTP set t ings:

1 Navigate to the Deployment > Settings page under the SMTP Configuration section.

2 Type the FQDN or IP address of the SMTP server into the SMTP server field.

3 If the SMTP server in your deployment is set to use authentication, click Use Authentication . This optionis necessary for all outgoing Analyzer emails to properly send to the intended recipients.

a Enter the username in the User field.

b Enter and confirm the password in the Password and Confirm Password fields.

This option provides the username/password used to authenticate against the SMTP server.

4 Type the email address from which mail is sent into the Sender address field.

5 Type the email address of the system administrator into the Administrator address field.

6 In the Email send timeout field, enter a timeout interval (in minutes). If the server does not respondwithin the specified interval, the Email send action is stopped and an error is reported.

7 To test connectivity to the SMTP server, click Test Connectivity .

8 To apply your changes, click Update .


25/35


Configuring SSL AccessThe SSL Access Configuration section allows you to configure and upload a custom Keystore/Certificate file forSSL access to the GMS appliance, or select the default local keystore.

To conf i gur e SSL access:

1 Navigate to the Deployment > Settings page under SSL Access Configuration section.

2 Select Default to keep, or revert to, the default settings where the default GMS Web Server certificatewith 'gmsvpserverks' keystore is used.

3 Select Custom to upload a custom keystore certificate for GMS SSL access.

4 In the Certificate file field, click Choose File to select your certificate file.

5 In the Certificate Key file field, click Choose File to select your certificate key file.

6 Type the password for the certificate into the Certificate password field.

7 Click View to display details about your certificate.

8 Click Update to submit your changes.


26/35


Controlling Deployment ServicesThe Deployment > Services page provides a list of the services that are running on your system as part ofAnalyzer Software. It also provides a way to stop or start any of the services.

To stop a service that is currently Enabled, select the checkbox for that service and then click Disable/Stop .

To start a service that is currently Disabled, select the checkbox for that service and then click Enable/Start .

To restart a service that is either Enabled or Disabled, select the checkbox for that service and then clickRestart .


27/35


7

27

Provisioning and Adding Units

After installation, registration, and role configuration, the next steps in setting up your Dell SonicWALL AnalyzerSoftware are provisioning Dell SonicWALL appliances to support Analyzer and adding them to the Dell SonicWALLAnalyzer. All Dell SonicWALL appliances must be provisioned before adding them to the Dell SonicWALL Analyzer.Make sure the provisioned Dell SonicWALL appliances have a valid Analyzer license, one Analyzer license foreach Dell SonicWALL appliance.

Topics:

• Provisioning a Dell SonicWALL Firewall Appliance on page 27

• Provisioning a Dell SonicWALL SRA SMB Appliance on page 28

• Provisioning a Dell SonicWALL E-Class SRA Series Appliance on page 29

• Adding Dell SonicWALL Appliances on page 30

Provisioning a Dell SonicWALL FirewallApplianceTo provision a Dell SonicWALL firewall appliance to support Analyzer, do the following:

1 Log in to the firewall appliance. Navigate to the Log > Syslog page.

2 In Syslog Servers, click Add .

3 Enter the Analyzer IP address to start sending syslogs. The Analyzer service should be activated.

4 Set the log in UTC format and log category.


28/35


5 Navigate to the System > Time page.

6 Enable Display UTC in logs (instead of local time) .

Provisioning a Dell SonicWALL SRA SMBApplianceTo provision a Dell SonicWALL SRA SMB appliance for Dell SonicWALL Analyzer, do the following:

1 Log in to the SRA SMB appliance. Navigate to the Log > Analyzer page.

2 In Analyzer Settings, click Enable Analyzer .

3 Click Add to add the Analyzer IP address, this starts sending syslogs.


29/35


4 Navigate to the System > Time page, and enable Display UTC in logs (instead of local time) .

Provisioning a Dell SonicWALL E-Class SRASeries ApplianceCurrently there is no Analyzer settings implementation in SonicWALL E-Class SRA series appliances. To addAnalyzer reporting support, use the Additional ViewPoint settings in the General Settings > ConfigureCentralized Management screen, and enter the Analyzer IP address and port number to start sending syslog.


30/35


Adding Dell SonicWALL AppliancesThis section describes how to add Dell SonicWALL appliances to the Dell SonicWALL Analyzer. Analyzer Softwarechecks with the Dell SonicWALL licensing server when you add an appliance, so it is important that DellSonicWALL Analyzer has Internet access to the server. Analyzer Software can communicate with Dell SonicWALLappliances through HTTP or HTTPS.

To add a Dell SonicWALL appl iance using t he Analyzer Soft war e management i nt erf ace, do t hefo l lowing:

1 Click the appliance tab that corresponds to the type of appliance that you want to add:

• SonicWALL firewall appliances

• SMA and EX-Series SRA appliances

2 Expand the Analyzer Software tree.

3 Do one of the following:

a To specify a group:

a select the group to which you are adding the Dell SonicWALL appliance.

b Right-click the group.

c Select Add Unit from the pop-up menu.

b To not specify a group:

a Right-click an open area in the left pane (TreeControl pane) of the Analyzer Softwaremanagement interface.

b Select Add Unit or click the Add Unit i con in the tool bar.

The Add Unit dialog box appears:


31/35


4 Enter a descriptive name for the Dell SonicWALL appliance in the Unit Name field. Do not enter the single quote character (‘) in the Unit Name field.

5 Enter the serial number of the Dell SonicWALL appliance in the Serial Number field.

6 Enter the IP address of the Dell SonicWALL appliance in the IP Address field.

7 Enter the administrator login name for the Dell SonicWALL appliance in the Login Name field.

8 Enter the password used to access the Dell SonicWALL appliance in the Password field.

9 For Access Mode , select from the following:

• The Dell SonicWALL appliance is connected with HTTPS by default.

• Enter the port used to connect to the Dell SonicWALL appliance in the Management Port field(default port for is HTTPS: 443).

10 Click OK . The new Dell SonicWALL appliance appears in the Analyzer management interface. It has ayellow icon that indicates it has not yet been successfully acquired.

Analyzer then attempts to set up an HTTPS connection to access the appliance. Analyzer then reads theappliance configuration and acquires the Dell SonicWALL appliance for reporting. This takes a fewminutes.

NOTE: After the Dell SonicWALL appliance is successfully acquired, its icon turns blue, itsconfiguration settings are displayed at the unit level, and its settings are saved to the database.


32/35


8

32

Support

• Related Technical Documentation on page 32

• Live Product Demos on page 33

Related Technical DocumentationDell SonicWALL reference documentation is available at the Dell SonicWALL Technical Documentation OnlineLibrary:

https://support.software.dell.com/

Dell SonicWALL Analyzer video training is available from the Analyzer Development Team:

http://software.sonicwall.com/gmsvp/Dev-Training/

The Dell SonicWALL Analyzer documentation set includes the following:

• Dell SonicWALL Analyzer Release Notes

• Dell SonicWALL Analyzer Software Getting Started Guide

• Dell SonicWALL Analyzer Virtual Appliance Getting Started Guide

• Dell SonicWALL Analyzer Administration Guide

https://support.software.dell.com/http://software.sonicwall.com/gmsvp/Dev-Training/http://software.sonicwall.com/gmsvp/Dev-Training/https://support.software.dell.com/


33/35


See https://support.software.dell.com//sonicwall-analyzer/release-notes-guides for more information.

Live Product DemosGet the most out of your Analyzer with the complete line of Dell SonicWALL products. The Dell SonicWALL LiveDemo Site provides free test drives of Dell SonicWALL security products and services through interactive liveproduct installations:

• UTM/Firewall/VPN

• Continuous Data Protection

• SSL VPN Secure Remote Access

• Content Filtering

• Email Security

• GMS and Analyzer

https://support.software.dell.com//sonicwall-analyzer/release-notes-guideshttps://support.software.dell.com//sonicwall-analyzer/release-notes-guides


34/35


For further information, visit: http://livedemo.sonicwall.com/

http://livedemo.sonicwall.com/http://livedemo.sonicwall.com/


35/35

About Dell

About DellDell listens to customers and delivers worldwide innovative technology, business solutions and services theytrust and value. For more information, visit www.software.dell.com .

Contacting DellTechnical support: Online support

Product questions and sales: (800) 306-9329

Email: [email protected]

Technical support resourcesTechnical support is available to customers who have purchased Dell software with a valid maintenancecontract and to customers who have trial versions. To access the Support Portal, go tohttps://support.software.dell.com/ .

The Support Portal provides self-help tools you can use to solve problems quickly and independently, 24 hours aday, 365 days a year. In addition, the portal provides direct access to product support engineers through an

online Service Request system.The site enables you to:

• Create, update, and manage Service Requests (cases)

• View Knowledge Base articles

• Obtain product notifications

• Download software. For trial software, go to Trial Downloads .

• View how-to videos

• Engage in community discussions

• Chat with a support engineer
http://software.dell.com/https://support.software.dell.com/mailto:[email protected]://support.software.dell.com/http://software.dell.com/trials/http://software.dell.com/trials/https://support.software.dell.com/mailto:[email protected]://support.software.dell.com/http://software.dell.com/

Date post:	07-Jul-2018
Category:	Documents
Upload:	lenin-kumar
View:	222 times
Download:	0 times

232-003116-00 RevA Analyzer 8.1 Software GettingStartedGuide

Documents