SonicWALL Security Dashboard Overview

Transcription

SonicWALL Security Dashboard Overview
SonicWALL Early Field Trial Draft
SonicWALL Security Dashboard
Document Scope
This document describes how to use the SonicWALL Security Dashboard feature on a
SonicWALL security appliance running SonicOS 3.8 firmware or later.
This document contains the following sections:
•
“SonicWALL Security Dashboard Overview” section on page 2
– “What is the SonicWALL Security Dashboard?” section on page 2
– “Benefits” section on page 4
– “How Does the SonicWALL Security Dashboard Work?” section on page 5
– “Platforms” section on page 5
•
“Using the SonicWALL Security Dashboard” section on page 5
– “Administrator Prerequisites” section on page 5
– “Administrator Configuration Tasks” section on page 5
•
“Related Features” section on page 14
SonicWALL Security Dashboard
1
SonicWALL Security Dashboard Overview
SonicWALL Security Dashboard Overview
This section provides an introduction to the SonicWALL Security Dashboard feature. This
section contains the following subsections:
•
“What is the SonicWALL Security Dashboard?” section on page 2
•
“Benefits” section on page 4
•
“How Does the SonicWALL Security Dashboard Work?” section on page 5
•
“Platforms” section on page 5
After reading the SonicWALL Security Dashboard Overview section, you will be familiar with
this feature and its benefits.
What is the SonicWALL Security Dashboard?
The SonicWALL Security Dashboard provides reports of the latest threat protection data from
a single SonicWALL appliance and aggregated threat protection data from SonicWALL security
appliances deployed globally. The SonicWALL Security Dashboard displays automatically upon
successful authentication to a SonicWALL security appliance running SonicOS 3.8 firmware or
later, and can be viewed at any time by navigating to the System > Security Dashboard menu
in the left-hand menu. Reports in the Security Dashboard include:
2
•
Viruses Blocked by SonicWALL Network
•
Intrusions Prevented by SonicWALL Network
•
Spyware Blocked by SonicWALL Network
•
Multimedia (IM/P2P) Detected/Blocked by SonicWALL Network
SonicWALL Security Dashboard
SonicWALL Security Dashboard Overview
Each report includes a graph of threats blocked over time and a table of the top blocked threats.
Reports, which are updated hourly, can be customized to display data for the last 12 hours, 14
days, 21 days, or 6 months. For easier viewing, SonicWALL Security Dashboard reports can
be transformed into a PDF file format with the click of a button. Figure 1 provides the default
view of the SonicWALL Security Dashboard.
Figure 1
SonicWALL Security Dashboard
SonicWALL Security Dashboard
3
SonicWALL Security Dashboard Overview
Benefits
The SonicWALL Security Dashboard provides the latest threat protection information to keep
you informed about potential threats being blocked by SonicWALL security appliances. If you
subscribe to SonicWALL’s security services, including Gateway Anti-Virus, Gateway
Anti-Spyware, Intrusion Prevention Service (IPS), and Content Filtering Service, you are
automatically protected from the threats reported by the SonicWALL Security Dashboard.
SonicWALL’s security services include ongoing new signature updates to protect against the
latest virus and spyware attacks. For information about activating SonicWALL security services,
refer to the “Purchasing Security Services” section on page 8.
The Security Dashboard provides insight into threats over time, and can be configured to
display data from multiple time periods. The SonicWALL Security Dashboard can be viewed
easily in the System > Security Dashboard page of the SonicWALL appliance management
interface, or as a custom generated PDF file. Figure 2 provides a PDF report view of the
SonicWALL Security Dashboard.
Figure 2
4
SonicWALL Security Dashboard PDF Report
SonicWALL Security Dashboard
Using the SonicWALL Security Dashboard
How Does the SonicWALL Security Dashboard Work?
The SonicWALL Security Dashboard provides global and appliance-level threat protection
statistics. At the appliance level, threat protection data from your SonicWALL security appliance
is displayed. At the global level, the SonicWALL Security Dashboard is updated hourly from the
SonicWALL backend server with aggregated threat protection data from globally-deployed
SonicWALL security appliances. Data provided by the SonicWALL backend server is cached
locally for reliable delivery.
Note
The SonicWALL security appliance must have Internet connectivity to receive the latest
threat protection statistics from the SonicWALL backend server, which reports aggregated
data from globally deployed SonicWALL security appliances. If you lose connectivity, cached
data from the last update will display, and the latest data will not be available until
connectivity is restored.
Platforms
The SonicWALL Security Dashboard is available on the SonicWALL security appliances
running SonicOS 3.8 firmware and later.
Using the SonicWALL Security Dashboard
This section contains the following subsections:
•
“Administrator Prerequisites” section on page 5
•
“Administrator Configuration Tasks” section on page 5
Administrator Prerequisites
SonicWALL security appliances running SonicOS 3.8 firmware or later must be set up and
registered on mySonicWALL.com. For registration instructions, refer to the SonicWALL Getting
Started Guide for your security appliance, available on the Web at:
http://www.sonicwall.com/services/documentation.html.
Note
The SonicWALL security appliance must be configured for Internet connectivity and be
connected to the Internet to display the latest reports.
Administrator Configuration Tasks
This section contains the following subsections:
•
“SonicWALL Security Dashboard Configuration Overview” section on page 6
•
“Purchasing Security Services” section on page 8
SonicWALL Security Dashboard
5
Using the SonicWALL Security Dashboard
SonicWALL Security Dashboard Configuration Overview
The SonicWALL Security Dashboard can be configured to display global or appliance-level
statistics, to display statistics for different time periods, and to generate a custom PDF file. For
information about purchasing SonicWALL security services that protect against the threats
reported in the SonicWALL Security Dashboard, refer to “Purchasing Security Services” section
on page 8.
The SonicWALL Security Dashboard displays automatically upon successful login to a
SonicWALL security appliance. You can access the SonicWALL Security Dashboard at any
time by navigating to System > Security Dashboard in the left-hand menu. You may see the
introductory screen shown in Figure 3 before the dashboard displays.
Figure 3
SonicWALL Security Dashboard Introductory Screen
This section provides the following subsections:
•
“Switching to Global or Appliance-Level View” section on page 6
•
“Selecting Custom Dates” section on page 7
•
“Generating a Security Dashboard PDF” section on page 7
Switching to Global or Appliance-Level View
To view SonicWALL Security Dashboard global reports, select the radio button next to Global
in the top of the System > Security Dashboard screen. To view appliance-level reports, select
the radio button next to the appliance serial number.
6
SonicWALL Security Dashboard
Using the SonicWALL Security Dashboard
Selecting Custom Dates
The SonicWALL Security Dashboard reports default to “Last 14 Days,” providing an aggregate
view of threats blocked during that time period. You can configure each report to one of four
optional time periods. Each report can be configured to reflect a different time period. To
change a report to reflect a different time period, perform the following steps:
Step 1
Step 2
Select the report you want to change:
•
Viruses Blocked by SonicWALL Network
•
Intrusions Prevented by SonicWALL Network
•
Spyware Blocked by SonicWALL Network
•
Multimedia (IM/P2P) Detected/Blocked by SonicWALL Network.
Next to the title of the selected report, click the pull-down menu and select one of the following
options:
•
Last 12 Hours - The selected report will display threat information from the last 12 hours
•
Last 14 Days - The selected report will display threat information from the last 14 days
•
Last 21 Days - The selected report will display threat information from the last 21 days
•
Last 6 Months - The selected report will display threat information from the last 6 months
Generating a Security Dashboard PDF
To create a PDF version of the SonicWALL Security Dashboard, first select the desired view
(global or appliance-level) and the desired time period for each report (the last 12 hours, 14
days, 21 days, or 6 months). Click the
button at the top of the page.
SonicWALL Security Dashboard
7
Using the SonicWALL Security Dashboard
Purchasing Security Services
To be protected from the threats reported in the SonicWALL Security Dashboard, it is
recommended that you purchase SonicWALL security services. This section provides
instructions for using the SonicWALL Registration & License Wizard, accessible from the
SonicWALL appliance management interface, to purchase SonicWALL security services.
SonicWALL security services include the following real-time protection services:
Note
•
Gateway Anti-Virus - Protects against viruses, worms, Trojans and other threats
•
Gateway Anti-Spyware - Protects against new and existing malicious spyware
•
Intrusion Prevention Service - Protects against application-layer attacks
•
Content Filtering Service - Enhances protection and productivity by limiting access to
objectionable Web content
•
Dynamic Support 8x5 - Provides one year of telephone and Web support, including
software and firmware updates
•
ViewPoint - Provides detailed and comprehensive reporting on network activity
Your SonicWALL security appliance must be configured for Internet connectivity and must
be connected to the Inernet to use the Registration & License Wizard.
To purchase SonicWALL security services using the SonicWALL Registration & License
Wizard, perform the following steps:
Step 1
Step 2
8
Log in to the SonicWALL appliance management interface.
In the left-navigation menu, click Wizards. The Configuration Wizard displays.
SonicWALL Security Dashboard
Using the SonicWALL Security Dashboard
Step 3
Select the radio button next to Registration & License Wizard and click Next.
Step 4
The welcome screen displays. Click Next.
SonicWALL Security Dashboard
9
Using the SonicWALL Security Dashboard
Step 5
10
If you have a mySonicWALL.com account, enter your username and password in the
Username and Password fields. If you do not have a mySonicWALL.com account, select the
radio button next to Create a sonicwall.com account. Click Next.
SonicWALL Security Dashboard
Using the SonicWALL Security Dashboard
Step 6
Note
Step 7
If you selected Create a sonicwall.com account, the User Registration page displays. Provide
the information requested in order to create your account, then click Next.
If you used an existing mySonicWALL.com account by providing your username and
password, you will not see this page. Skip to the next step.
Select the checkbox next to the service you want to purchase and click Next.
SonicWALL Security Dashboard
11
Using the SonicWALL Security Dashboard
12
Step 8
A notice displays that a separate browser window will be launched. Click OK.
Step 9
The mySonicWALL.com page is launched in a separate browser window. Follow the on-screen
instructions to complete the purchase of SonicWALL security services.
SonicWALL Security Dashboard
Using the SonicWALL Security Dashboard
Step 10 After you have purchased the security services, return to the wizard window. The License
Synchronization window will synchronize the new security services with the SonicWALL
security appliance. Click Next to complete the synchronization.
Step 11 The Congratulations page displays. You have successfully purchased and synchronized your
security services. Click Close to close the wizard.
SonicWALL Security Dashboard
13
Related Features
To verify that the security services are licensed, navigate to Security Services > Summary in
the left-hand menu and verify that the status of the services is Licensed. For information on
advanced configuration for each service, refer to the SonicWALL Administrator’s Guides, available
on the Web at: http://www.sonicwall.com/services/documentation.html.
Related Features
SonicWALL Registration & License Wizard - Use the SonicWALL Registration & License
Wizard to purchase SonicWALL security services directly from your SonicWALL security
appliance management interface.
SonicWALL Security Services - SonicWALL provides a comprehensive offering of security
services that protect against the threats reported in the SonicWALL Security Dashboard. For a
full list, visit the SonicWALL website at http://www.sonicwall.com/services/documentation.html.
Some of the Security Services include:
•
Gateway Anti-Virus - Protects against viruses, worms, Trojans and other threats
•
Gateway Anti-Spyware - Protects against new and existing malicious spyware
•
Intrusion Prevention Service - Protects against application-layer attacks
•
Content Filtering Service - Enhances protection and productivity by limiting access to
objectionable Web content
•
Dynamic Support 8x5 - Provides one year of telephone and Web support, including
software and firmware updates
•
ViewPoint - Provides detailed and comprehensive reporting on network activity
Solution Document Version History
14
Version Number
Date
Notes
1
12/11/2006
This document was created.
SonicWALL Security Dashboard