1 / 27

What’s New in WatchGuard Dimension v1.1

What’s New in WatchGuard Dimension v1.1. What’s New in Dimension v1.1. Hyper-V Support Upgrade to Dimension v1.1 Log Server Database Status Report [77253] Back up and restore the Log Server database at an external location [76550] External PostgreSQL server support [76223]

arnon
Download Presentation

What’s New in WatchGuard Dimension v1.1

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. What’s New inWatchGuard Dimension v1.1

  2. What’s New in Dimension v1.1 • Hyper-V Support • Upgrade to Dimension v1.1 • Log Server Database • Status Report [77253] • Back up and restore the Log Server database at an external location [76550] • External PostgreSQL server support [76223] • Log Server Management • IP address mapping for devices with static or dynamic IP addresses [77934] • Support for SMTP gateways that require STARTTLS [77091] • Reporting • New detail reports for Gateway AntiVirus and Intrusion Prevention Service [77106 and 76656] • Publish scheduled reports to an external directory [75587 and 75908]

  3. Hyper-V Support

  4. Hyper-V Support • You can now deploy Dimension with Hyper-V for Microsoft Windows Server 2008 R2, 2012, or 2012 R2 • Download the Dimension VHD file and use Microsoft Server Hyper-V Manager, or another Hyper-V environment, to install the Dimension VM. • Complete installation instructions are included in the Dimension Release Notes and Dimension Help. To summarize: • Deploy and start the Dimension VM. • Add an IDE hard disk to the Dimension VM. • Run the WatchGuard Dimension Setup Wizard to configure Dimension.

  5. Upgrade to Dimension v1.1

  6. Upgrade to Dimension v1.1 • The procedure to upgrade Dimension from v1.0 to v1.1 is a two-step process: • Upgrade Dimension with the v1.1 upgrade preparation file.This updates the Dimension Upgrade feature. • Upgrade Dimension with the v1.1 upgrade file.This file contains the v1.1 feature upgrades for Dimension.

  7. Upgrade to Dimension v1.1 • To upgrade Dimension: • Connect to Dimension at https://<IP address of Dimension> and log in. • Select Manage System > System Settings. • Click Upgrade and select the first upgrade file: watchguard-dimension_1_1_amd64.deb • Wait for the upgrade to complete and Dimension to reboot.Do not reboot the Dimension VM before the upgrade is complete. • Log in again. • Select Administration > System Settings. • Click Upgrade and select the second upgrade file: watchguard-dimension_1_1_apt.tgz Wait for the upgrade to complete. If the upgrade requires the Dimension services to restart, Dimension will reboot. • Select Administration > System Settings and verify the version number is correct.

  8. Log Server Database

  9. Status Report • The Status Report for the Dimension database is available on the Administration > Database page. • The Status Report includes statistics for the Log Server database, and log message and report statistics for the devices that are connected to Dimension.

  10. External Backup and Restore • You can configure an SFTP server as a location for remote backups. • Select Administration > System Settings > Configuration • Remote Backup settings are used with the Database Backup settings on the Administration > Log Server Management > Configuration > General page.

  11. External PostgreSQL Server Support • You can now specify an external PostgreSQL Server for the Log Server database • Dimension supports PostgreSQL server v9.2, 9.1.9, or 9.1.11 • Select Administration > Log Server Management > Configuration

  12. Log Server Management

  13. IP Address Mapping • Enable Dimension to replace device IP addresses with a name in some Dimension Dashboards and reports. • Available for both dynamically addressed devices and devices with a static IP address. • Select Administration > IP Address Mapping.

  14. IP Address Mapping

  15. IP Address Mapping — Dynamic IP Address Resolution • If the source IP address is a private address, as defined in RFC 1918, Dimension can send a reverse DNS request to its name server and resolve the IP address to a name. • Provides name resolution for DHCP environments. • Requires the name server used by Dimension to provide reverse DNS lookups. • When enabled, Dimension replaces the private IP address for dynamically addressed devices with the name the DNS server returns. This name appears in some Dimension Dashboards and reports.

  16. IP Address Mapping — Dynamic IP Address Resolution • To enable dynamic IP address resolution: • Select Administration > Log Server Management > IP Address Mapping. • In the Dynamic IP Address Resolution section, click Configure and enable the feature.

  17. IP Address Mapping — Static IP Address Map • You can now manually create an IP address/name pair to replace a static IP address with a designated name in some Dimension Dashboards and reports. • Names can be host names or other descriptive names. • You can add IP address/name pairs for devices that are connected to Dimension and for devices that have not connected to Dimension.

  18. IP Address Mapping — Static IP Address Map • Manually manage individual IP address/name pairs: • Select Administration > Log Server Management > IP Address Mapping. • In the Static IP Address Map section, add, edit, or remove IP address/name pairs in the Static IP Address Map list.

  19. IP Address Mapping — Static IP Address Map • To add many IP address/name pairs to the Static IP Address Map list, import a CSV file that includes the pairs. • To modify the names assigned to any of the IP addresses in the list, export a CSV file of all the IP address/name pairs, change the names, and import the list again. The names are automatically updated. • You cannot change the IP address in any IP address/name pair. You must remove the pair and add a new pair with the correct IP address. • Reset the Static IP Address Map list to remove all IP address/name pairs from the list. • Changes to the Static IP Address Map list are committed automatically. You do not have to save changes to the page before they take effect. • Changes to the Static IP Address Map do not affect the settings for dynamic IP address resolution.

  20. IP Address Mapping — Reports for IP Address Mapping • The names that replace the IP addresses for dynamically addressed devices, and the names you specify for devices with static IP addresses, appear in some of the Dimension Dashboard pages and reports. • Dashboard Reports • Executive Dashboard — Top Clients section • Security Dashboard — Blocked Clients section • FireWatch • Source tab — Remains available when you filter on a name • All tabs — When you select View connections for for a name

  21. IP Address Mapping — Reports for IP Address Mapping • Available Reports • Application Usage • Top Applications by Host • Top Hosts by Application • Blocked Applications • Top Blocked by Host • Top Hosts Blocked • Top Clients by Bandwidth • Hosts (Sent and Received) pivot • Hosts (Sent) pivot • Hosts (Received) pivot • Top Clients by Hits — Hosts pivot • Most Active Clients Report • Web Audit — Client pivot (for log messages without an authenticated user) • WebBlocker — Client pivot (for log messages without an authenticated user) • Per Client Report — If you specify the name in the search criteria

  22. SMTP with TLS • Dimension now supports sending notifications to SMTP gateways that require STARTTLS. • Select Administration > Log Server Management > Configuration > Notifications. • Make sure to verify that the CA of the SMTP server certificate is trusted by Dimension. If the CA is not trusted, import the CA certificate to Dimension.

  23. Reporting

  24. Gateway AntiVirus and Intrusion Prevention Service Reports • If your device sends log message data about the Gateway AntiVirus (GAV) and Intrusion Prevention Service (IPS) subscription services, you can now see reports of the GAV and IPS data in Dimension. • To see a GAV or IPS report: • From the Home page, select a device or group. • Select the Reports tab. • In the Detail section, select Gateway AntiVirus or Intrusion Prevention Service.

  25. Send Scheduled Reports to an External Directory • You can now send your scheduled reports may to an external directory on an FTP server or your remote backup directory. • Before you can select to send a scheduled report to an external directory, you must add an FTP server to your Log Server configuration or specify a remote backup location. • Add an FTP Server: Administration > Log Server Management > Reporting > FTP Servers • Specify a remote backup location:Administration > System Settings > Configuration > Remote Backup

  26. Send Scheduled Reports to an External Directory • To send reports to an external directory: • Select Administration > Schedule Reports. • Add or edit a report schedule. • Select Send reports to the specified directory and select an FTP server or remote backup location that you have already configured.

  27. Thank You!

More Related