REPORTING SonicWALL ViewPoint 4.0 Release Note CONTENTS. SonicWALL, Inc. Software Release: August 29, 2006 Document Version: August 29, 2006

Transcription

1 REPORTING SonicWALL ViewPoint 4.0 Release Note CONTENTS PLATFORM COMPATIBILITY NEW FEATURES KNOWN ISSUES RESOLVED KNOWN ISSUES INSTALLATION PROCEDURES SonicWALL, Inc. Software Release: August 29, 2006 Document Version: August 29, 2006 PLATFORM COMPATIBILITY The SonicWALL ViewPoint 4.0 release supports the following operating systems and database flavors: Windows 2003 Server (SP1) Windows 2000 Server (SP4) Windows 2000 Professional (SP4) Windows XP Professional (SP2) Built in MSDE footprint of Microsoft SQL 2000 database SonicWALL ViewPoint 4.0 services now use JRE 1.5.0_06. However, ViewPoint 4.0 automatically downloads the Java Plug-in 1.5 when accessing ViewPoint. SonicWALL ViewPoint 4.0 also uses Tomcat and installs Sprinta 2000 JDBC driver version INSTALLATION WARNING: Two known issues have been identified that affect the installation of ViewPoint 4.0. Before installing ViewPoint, refer to #38694 in the Known Issues section. SonicWALL ViewPoint 4.0 requires the following firmware versions: Running on the SonicWALL security appliances, SonicWALL Firmware or higher and SonicOS 1.0 or higher Running on the SonicWALL CSM Series appliances, SonicOS CF 1.0 or higher

2 Key Features UI Refresh SonicWALL ViewPoint 4.0 now contains new login screen and function tabs laid out at the top of the screen. 2

3 The SonicWALL ViewPoint 4.0 release supports the following new reporting features: At-a-Glance > Summary Report The At-a-Glance report provides a summary of individual reports displayed on a single screen. Compliance Reporting The compliance reporting feature provides options for creating detailed, customized reports. 3

4 Enhanced Logging Support: Log Viewer Support This feature applies to systems that are using distributed summarizer mode. It provides the following enhancements: Filter SYSLOG data by source or destination port or IP address Log viewer can be used to analyze raw SYSLOG data for forensics purposes 4

5 Enhanced Summarizer Performance The following performance enhancements are now available: The Web Usage reports feature is redesigned for increased performance The Report Data Management feature moves older data from SGMSDB to SGMSDB-ARCHIVE for improved performance Factory defaults: a set of key reports are enabled for summarization when a unit is added to the system 5

6 Release Caveats The following are formal notes and prerequisite warnings for the SonicWALL ViewPoint 4.0 release: If you are installing ViewPoint on a Windows system that is also running Global VPN Client, the SNWL ViewPoint Syslog service will bind to the Global VPN virtual adaptor, not the Ethernet NIC. For this configuration to work, you need to edit the sgmsconfig.xml file and enter the IP address of the Ethernet NIC for the parameter name "scheduler.ipaddress": <Parameter name="scheduler.ipaddress" value=""/>. You must uninstall ViewPoint and earlier versions prior to installing ViewPoint version 4.0. ViewPoint includes and installs Microsoft SQL Server Developer s Edition (MSDE). This database is limited to a size of 2GB. If ViewPoint needs to log into the SonicWALL appliance via the WAN interface, the WAN IP address must be static. 6

7 KNOWN ISSUES The following is a list of known issues in the SonicWALL ViewPoint 4.0 release: Management 38694: This issue has two parts, both of which cause the ViewPoint installation to fail. Both have workarounds. Symptom 1: ViewPoint installation fails on systems set to certain locales. Condition: Occurs when the default system locale is set to a language on the following list. Kyrgyz (Cyrillic) Republic of Kyrgyzstan Uzbek (Latin) Republic of Uzbekistan Tatar Tatarstan Punjabi (Gurmukhi) India Gujarati India Tamil India Mongolian (Cyrillic) Mongolia Galician Spain Konkani India Uzbek (Cyrillic) Republic of Uzbekistan Armenian Republic of Armenia Azeri (Latin) Azerbaijan Kazakh Kazakstan Telugu India Kannada India Marathi India Sanskrit India Syriac Syria Azeri (Cyrillic) Azerbaijan Chinese Hong Kong Spanish Colombia Workaround: Temporarily change your system locale to US English by using the following procedure: 1. Open Control Panel > Regional and Language Options 2. Click the Advanced tab. 3. In the drop-down list, select English (United States). 4. If you completed the previous ViewPoint installation in spite of the error, uninstall Viewpoint. 5. Reboot and retry the ViewPoint installation. Symptom 2: ViewPoint installation fails on systems with McAfee Anti-virus. Workaround: Disable McAfee Antivirus with the following procedure: 1. Right-click My Computer and select Manage. 2. Navigate to Services and Applications and select Services. 3. Double-click the McAfee McShield service. 4. In the Properties dialog box, on the General tab, change Startup Type to Disabled. 5. Click Apply. 6. If the service is currently running, click Stop. 7. Click OK : Symptom: Help links on some screens do not display the correct help screen. Workaround: Navigate to Console > Help > About ViewPoint, and then click Help at the top right. In the Help window, near the top, click TOC to display the Help table of contents : Symptom: Hostname of the PC on which ViewPoint is being installed must be 20 characters or less. Condition: Occurs when the PC is connected to the network : Symptom: You cannot install ViewPoint in a folder that has an embedded blank space in its name (i.e., Program Files). Condition: Occurs on Windows. 7

8 28020: Symptom: ViewPoint passwords cannot contain special characters (# +, % &) or blank spaces embedded in the password. ViewPoint database passwords also cannot contain special characters (# +, % &). <No Number> Symptom: Some services are not installed during certain upgrade installations. Workaround: Using the Windows Run command, you can manually install the missing services by running the following three commands: Reporting To install the SNWL ViewPoint Update Manager, the SNWL ViewPoint Scheduler, and the SNWL ViewPoint Summarizer, run: <install-folder>\temp\vpinstall.bat To install the SNWL ViewPoint Syslog Scheduler, run: <install-folder>\temp\schedinstall To install the SNWL Web Server Service, run: <install-folder>\tomcat\bin\tomcat install 44591: Symptom: Scheduled weekly PDF report gets No Data Available message even when data is available. Condition: By design, PDF support is available in Distributed Summarizer mode only : Symptom: The total number of attempts listed in a Web Filter-By Category report does not equal the sum of the attempts displayed in the detailed information. Condition: Occurs when viewing Web Filter-By Category reports. This issue affects reports in CSM appliances only : Symptom: No backward support for data stored in the table format used prior to Patch 5 of release Condition: Occurs in Web Usage > By Category reports and Web Usage > By Site reports when Patch 5 is not installed. <No Number> Symptom: When you enable both the User Level Access (ULA) and Name Resolution features at the same time, reports display the hostname, but not the user name. Workaround: To display the user name in the reports, enable ULA and disable Name Resolution in the firewall/appliance. <No Number> Symptom: Known issue with displaying inline ed reports with drill-down client information using the following clients: o Alta Vista o Eudora o Gmail o Hotmail o Microsoft Outlook 2002 o Yahoo Workaround: ViewPoint 4.0 supports Microsoft Outlook Express and Microsoft Outlook 2000 for inline reporting. 8

9 RESOLVED KNOWN ISSUES The following is a list of resolved known issues in the SonicWALL ViewPoint 4.0 release: Management 41892: Symptom: GMS scheduled firmware upgrades are executed immediately rather than the actual configured scheduled time. Condition: Occurs when you schedule a firmware upgrade for a future time/date. Reporting 43903: Symptom: GMS summarized data is not deleted according to the days to store summarizer archive setting. Condition: Set a date value in Console > Reports > Summarizer Days to Store Summarized Data. Wait until after the Delete Syslog Daily at <time> and then check the reports for previous dates. The log will display that the data was successfully deleted, but the report will still show the data : Symptom: The Summarizer repeatedly attempts to summarize a SYSLOG file and never marks it as processed. Condition: This happens when bad characters are part of the SYSLOG, resulting in poor Summarizer performance : Symptom: Poor Summarizer performance after upgrading to on systems with large amounts of web usage traffic. Condition: Results in a blocking state, slowing down Summarizer performance : Symptom: Inline reports are limited to 8 categories. Condition: Occurs when generating inline reports. Workaround: Use PDF formatted reports : If you navigate to the last page of site entries in the Top Sites Over Time report, the page displays no data. This is because the total count used by the navigation is larger than the actual available data to display : Symptom: The ViewPoint Summarizer does not process data and is utilizing 100% CPU. Condition: Occurs when running the Summarizer : Symptom: Scheduled Reports are not ed or archived, and then the Schedule fails. TimeoutException for report/resource error is displayed. Condition: Occurs when either the Web Usage by Users over Time report or the Web Usage Top Sites over Time report is included in Scheduled Reports, and the Zip report into a single file option is enabled. P/N Document created: 08/15/06 Last updated: 08/29/06 9