S o n i c W A L L E a r l y F i e l d T r i a l D r a f t

SonicWALL Security Dashboard

Document ScopeThis document describes how to use the SonicWALL Security Dashboard feature on a SonicWALL security appliance running SonicOS 3.8 firmware or later.

This document contains the following sections:

• “SonicWALL Security Dashboard Overview” section on page 2

– “What is the SonicWALL Security Dashboard?” section on page 2

– “Benefits” section on page 4

– “How Does the SonicWALL Security Dashboard Work?” section on page 5

– “Platforms” section on page 5

• “Using the SonicWALL Security Dashboard” section on page 5

– “Administrator Prerequisites” section on page 5

– “Administrator Configuration Tasks” section on page 5

• “Related Features” section on page 14

1 SonicWALL Security Dashboard

SonicWALL Security Dashboard Overview

SonicWALL Security Dashboard OverviewThis section provides an introduction to the SonicWALL Security Dashboard feature. This section contains the following subsections:

• “What is the SonicWALL Security Dashboard?” section on page 2

• “Benefits” section on page 4

• “How Does the SonicWALL Security Dashboard Work?” section on page 5

• “Platforms” section on page 5

After reading the SonicWALL Security Dashboard Overview section, you will be familiar with this feature and its benefits.

What is the SonicWALL Security Dashboard?The SonicWALL Security Dashboard provides reports of the latest threat protection data from a single SonicWALL appliance and aggregated threat protection data from SonicWALL security appliances deployed globally. The SonicWALL Security Dashboard displays automatically upon successful authentication to a SonicWALL security appliance running SonicOS 3.8 firmware or later, and can be viewed at any time by navigating to the System > Security Dashboard menu in the left-hand menu. Reports in the Security Dashboard include:

• Viruses Blocked by SonicWALL Network

• Intrusions Prevented by SonicWALL Network

• Spyware Blocked by SonicWALL Network

• Multimedia (IM/P2P) Detected/Blocked by SonicWALL Network

2 SonicWALL Security Dashboard

SonicWALL Security Dashboard Overview

Each report includes a graph of threats blocked over time and a table of the top blocked threats. Reports, which are updated hourly, can be customized to display data for the last 12 hours, 14 days, 21 days, or 6 months. For easier viewing, SonicWALL Security Dashboard reports can be transformed into a PDF file format with the click of a button. Figure 1 provides the default view of the SonicWALL Security Dashboard.

Figure 1 SonicWALL Security Dashboard

3 SonicWALL Security Dashboard

SonicWALL Security Dashboard Overview

BenefitsThe SonicWALL Security Dashboard provides the latest threat protection information to keep you informed about potential threats being blocked by SonicWALL security appliances. If you subscribe to SonicWALL’s security services, including Gateway Anti-Virus, Gateway Anti-Spyware, Intrusion Prevention Service (IPS), and Content Filtering Service, you are automatically protected from the threats reported by the SonicWALL Security Dashboard. SonicWALL’s security services include ongoing new signature updates to protect against the latest virus and spyware attacks. For information about activating SonicWALL security services, refer to the “Purchasing Security Services” section on page 8.

The Security Dashboard provides insight into threats over time, and can be configured to display data from multiple time periods. The SonicWALL Security Dashboard can be viewed easily in the System > Security Dashboard page of the SonicWALL appliance management interface, or as a custom generated PDF file. Figure 2 provides a PDF report view of the SonicWALL Security Dashboard.

Figure 2 SonicWALL Security Dashboard PDF Report

4 SonicWALL Security Dashboard

Using the SonicWALL Security Dashboard

How Does the SonicWALL Security Dashboard Work?The SonicWALL Security Dashboard provides global and appliance-level threat protection statistics. At the appliance level, threat protection data from your SonicWALL security appliance is displayed. At the global level, the SonicWALL Security Dashboard is updated hourly from the SonicWALL backend server with aggregated threat protection data from globally-deployed SonicWALL security appliances. Data provided by the SonicWALL backend server is cached locally for reliable delivery.

Note The SonicWALL security appliance must have Internet connectivity to receive the latest threat protection statistics from the SonicWALL backend server, which reports aggregated data from globally deployed SonicWALL security appliances. If you lose connectivity, cached data from the last update will display, and the latest data will not be available until connectivity is restored.

PlatformsThe SonicWALL Security Dashboard is available on the SonicWALL security appliances running SonicOS 3.8 firmware and later.

Using the SonicWALL Security DashboardThis section contains the following subsections:

• “Administrator Prerequisites” section on page 5

• “Administrator Configuration Tasks” section on page 5

Administrator PrerequisitesSonicWALL security appliances running SonicOS 3.8 firmware or later must be set up and registered on mySonicWALL.com. For registration instructions, refer to the SonicWALL Getting Started Guide for your security appliance, available on the Web at: http://www.sonicwall.com/services/documentation.html.

Note The SonicWALL security appliance must be configured for Internet connectivity and be connected to the Internet to display the latest reports.

Administrator Configuration TasksThis section contains the following subsections:

• “SonicWALL Security Dashboard Configuration Overview” section on page 6

• “Purchasing Security Services” section on page 8

5 SonicWALL Security Dashboard

Using the SonicWALL Security Dashboard

SonicWALL Security Dashboard Configuration OverviewThe SonicWALL Security Dashboard can be configured to display global or appliance-level statistics, to display statistics for different time periods, and to generate a custom PDF file. For information about purchasing SonicWALL security services that protect against the threats reported in the SonicWALL Security Dashboard, refer to “Purchasing Security Services” section on page 8.

The SonicWALL Security Dashboard displays automatically upon successful login to a SonicWALL security appliance. You can access the SonicWALL Security Dashboard at any time by navigating to System > Security Dashboard in the left-hand menu. You may see the introductory screen shown in Figure 3 before the dashboard displays.

Figure 3 SonicWALL Security Dashboard Introductory Screen

This section provides the following subsections:

• “Switching to Global or Appliance-Level View” section on page 6

• “Selecting Custom Dates” section on page 7

• “Generating a Security Dashboard PDF” section on page 7

Switching to Global or Appliance-Level View

To view SonicWALL Security Dashboard global reports, select the radio button next to Global in the top of the System > Security Dashboard screen. To view appliance-level reports, select the radio button next to the appliance serial number.

6 SonicWALL Security Dashboard

Using the SonicWALL Security Dashboard

Selecting Custom Dates

The SonicWALL Security Dashboard reports default to “Last 14 Days,” providing an aggregate view of threats blocked during that time period. You can configure each report to one of four optional time periods. Each report can be configured to reflect a different time period. To change a report to reflect a different time period, perform the following steps:

Step 1 Select the report you want to change:

• Viruses Blocked by SonicWALL Network

• Intrusions Prevented by SonicWALL Network

• Spyware Blocked by SonicWALL Network

• Multimedia (IM/P2P) Detected/Blocked by SonicWALL Network.

Step 2 Next to the title of the selected report, click the pull-down menu and select one of the following options:

• Last 12 Hours - The selected report will display threat information from the last 12 hours

• Last 14 Days - The selected report will display threat information from the last 14 days

• Last 21 Days - The selected report will display threat information from the last 21 days

• Last 6 Months - The selected report will display threat information from the last 6 months

Generating a Security Dashboard PDF

To create a PDF version of the SonicWALL Security Dashboard, first select the desired view (global or appliance-level) and the desired time period for each report (the last 12 hours, 14 days, 21 days, or 6 months). Click the button at the top of the page.

7 SonicWALL Security Dashboard

Using the SonicWALL Security Dashboard

Purchasing Security ServicesTo be protected from the threats reported in the SonicWALL Security Dashboard, it is recommended that you purchase SonicWALL security services. This section provides instructions for using the SonicWALL Registration & License Wizard, accessible from the SonicWALL appliance management interface, to purchase SonicWALL security services. SonicWALL security services include the following real-time protection services:

• Gateway Anti-Virus - Protects against viruses, worms, Trojans and other threats

• Gateway Anti-Spyware - Protects against new and existing malicious spyware

• Intrusion Prevention Service - Protects against application-layer attacks

• Content Filtering Service - Enhances protection and productivity by limiting access to objectionable Web content

• Dynamic Support 8x5 - Provides one year of telephone and Web support, including software and firmware updates

• ViewPoint - Provides detailed and comprehensive reporting on network activity

Note Your SonicWALL security appliance must be configured for Internet connectivity and must be connected to the Inernet to use the Registration & License Wizard.

To purchase SonicWALL security services using the SonicWALL Registration & License Wizard, perform the following steps:

Step 1 Log in to the SonicWALL appliance management interface.

Step 2 In the left-navigation menu, click Wizards. The Configuration Wizard displays.

8 SonicWALL Security Dashboard

Using the SonicWALL Security Dashboard

Step 3 Select the radio button next to Registration & License Wizard and click Next.

Step 4 The welcome screen displays. Click Next.

9 SonicWALL Security Dashboard

Using the SonicWALL Security Dashboard

Step 5 If you have a mySonicWALL.com account, enter your username and password in the Username and Password fields. If you do not have a mySonicWALL.com account, select the radio button next to Create a sonicwall.com account. Click Next.

10 SonicWALL Security Dashboard

Using the SonicWALL Security Dashboard

Step 6 If you selected Create a sonicwall.com account, the User Registration page displays. Provide the information requested in order to create your account, then click Next.

Note If you used an existing mySonicWALL.com account by providing your username and password, you will not see this page. Skip to the next step.

Step 7 Select the checkbox next to the service you want to purchase and click Next.

11 SonicWALL Security Dashboard

Using the SonicWALL Security Dashboard

Step 8 A notice displays that a separate browser window will be launched. Click OK.

Step 9 The mySonicWALL.com page is launched in a separate browser window. Follow the on-screen instructions to complete the purchase of SonicWALL security services.

12 SonicWALL Security Dashboard

Using the SonicWALL Security Dashboard

Step 10 After you have purchased the security services, return to the wizard window. The License Synchronization window will synchronize the new security services with the SonicWALL security appliance. Click Next to complete the synchronization.

Step 11 The Congratulations page displays. You have successfully purchased and synchronized your security services. Click Close to close the wizard.

13 SonicWALL Security Dashboard

Related Features

To verify that the security services are licensed, navigate to Security Services > Summary in the left-hand menu and verify that the status of the services is Licensed. For information on advanced configuration for each service, refer to the SonicWALL Administrator’s Guides, available on the Web at: http://www.sonicwall.com/services/documentation.html.

Related FeaturesSonicWALL Registration & License Wizard - Use the SonicWALL Registration & License Wizard to purchase SonicWALL security services directly from your SonicWALL security appliance management interface.

SonicWALL Security Services - SonicWALL provides a comprehensive offering of security services that protect against the threats reported in the SonicWALL Security Dashboard. For a full list, visit the SonicWALL website at http://www.sonicwall.com/services/documentation.html.

Some of the Security Services include:

• Gateway Anti-Virus - Protects against viruses, worms, Trojans and other threats

• Gateway Anti-Spyware - Protects against new and existing malicious spyware

• Intrusion Prevention Service - Protects against application-layer attacks

• Content Filtering Service - Enhances protection and productivity by limiting access to objectionable Web content

• Dynamic Support 8x5 - Provides one year of telephone and Web support, including software and firmware updates

• ViewPoint - Provides detailed and comprehensive reporting on network activity

Solution Document Version History

Version Number Date Notes1 12/11/2006 This document was created.

14 SonicWALL Security Dashboard