Release Notes. Contents. Release Purpose. Platform Compatibility. Dell SonicWALL GMS Virtual Appliance / UMA 7.2 Release Notes

Transcription

1 Release Ntes Management and Reprting Dell SnicWALL GMS Virtual Appliance / UMA 7.2 Release Ntes SnicOS Cntents Release Purpse... 1 Platfrm Cmpatibility... 1 Brwser Supprt... 4 Enhancements in GMS Knwn Issues... 7 Reslved Issues... 8 Upgrading t GMS Online Training Materials Related Technical Dcumentatin Release Purpse The Dell SnicWALL GMS 7.2 release prvides a number f enhancements and fixes fr Dell SnicWALL GMS Virtual Appliances and UMA EM5000 appliances. This release is nt affected by the Bash Cde Injectin Vulnerability via Specially Crafted Envirnment Variables (CVE ). Platfrm Cmpatibility The Dell SnicWALL GMS 7.2 release can be hsted in the fllwing tw deplyment scenaris: VMware ESX/ESXi Virtual Appliance UMA EM5000 Universal Management Appliance Deplyment Cnsideratins: Befre selecting a platfrm t use fr yur GMS deplyment, please use the Capacity Calculatr 2. This helps yu setup the crrect GMS system fr yur deplyment. It is highly recmmended that steps are taken t minimize abrupt shutdwns f the server hsting GMS, as this can cause crruptin f the Reprting database, ptentially leading t lss f data fr the current mnth. A pssible slutin includes using an Uninterrupted Pwer Supply (UPS). Dell SnicWALL GMS 7.2 Release Ntes

2 Release Ntes GMS Virtual Appliance Supprted Platfrms The elements f basic VMware structure must be implemented prir t deplying the Dell SnicWALL GMS Virtual Appliance. The GMS Virtual Appliance runs n the fllwing VMware platfrms: ESXi 4.1, 5.0, and 5.1 ESXi 4.0 Update 1 (Build and newer) ESX 4.1 ESX 4.0 Update 1 (Build and newer) Virtual Appliance Deplyment Cnsideratins Please cnsider the fllwing befre deplying the GMS Virtual Appliance: GMS management is nt supprted n Apple MacOS. All mdules are 64-bit. Using the Flw Server Agent rle requires a minimum f: Quad Cre 16 GB f memry 300 HDD GMS Virtual Appliance Hardware Resurce Requirements Use the Capacity Calculatr 2 t determine the hardware requirements fr yur deplyment. The perfrmance f GMS Virtual Appliance depends n the underlying hardware. It is highly recmmended t dedicate all the resurces that are allcated t the Virtual Appliance, especially the hard-disk (datastre). In envirnments with high vlumes f syslgs r AppFlw (IPFIX), yu will need t dedicate lcal datastres t the GMS Virtual Appliance. Starting with GMS 7.1 the Virtual Appliances are 64-bit, which take advantage f additinal RAM available t it. A minimum f 4 GB RAM is required. Hwever, at least 8 GB f RAM is highly recmmended fr better perfrmance f reprting mdules. Please read the Capacity Planning and Perfrmance Tuning appendix in the GMS Administratr s Guide. Hard Drive HDD Specificatins The fllwing hard drive HDD specificatins are required when using the GMS Virtual Appliance: Spindle Speed : 7200 and higher Cache: 64MB and higher Transfer rate: 600 MB/s r higher Average Latency: 4 ms r lwer UMA EM5000 Requirements The GMS 7.2 release is supprted n the Dell SnicWALL UMA EM5000 Universal Management Appliance. The 3.1 GB f RAM n the UMA EM5000 is sufficient memry t run GMS 7.2. MySQL Requirements GMS autmatically installs MySQL as part f the base installatin package. Separately installed instances f MySQL are nt supprted with GMS. Dell SnicWALL GMS 7.2 Release Ntes 2

3 Java Supprt Release Ntes Dwnlad and install the latest versin f the Java 7 plug-in n any system that accesses the GMS management interface. This can be dwnladed frm: r Dell SnicWALL Appliances Supprted fr GMS Management Dell SnicWALL GMS 7.2 supprts the fllwing Dell SnicWALL appliances and firmware versins: Dell SnicWALL Platfrms Dell SnicWALL Firmware Versin Firewall / Netwrk Security SuperMassive Series SuperMassive 9000 Series NSA Series TZ Series PRO Series CSM Series SnicOS 6.0 r newer Nte: Only partial plicy management and reprting supprt is currently available. The fllwing SuperMassive specific features are nt supprted fr centralized plicy management in GMS 7.2: Multi-blade CASS High Availability/Clustering Supprt fr Management Interface Flw Reprting Cnfiguratins Multi-blade VPN Advanced Switching Restart: SnicOS versus Chassis Cntact yur Dell SnicWALL Sales representative fr mre infrmatin. SnicOS 6.1 r newer SnicOS Enhanced 5.0 r newer SnicOS Enhanced 3.2 r newer SnicOS Standard 3.1 r newer SnicOS Enhanced 3.2 r newer SnicOS CF 2.0 r newer Security/ Anti-Spam Security Series Security 7.2 r newer (management nly) Secure Remte Access SMB SSL-VPN Series E-Class SRA Series SnicOS SSL-VPN 2.0 r newer (management) SnicOS SSL-VPN 2.1 r newer (reprting) SRA 9.0 r newer Backup and Recvery CDP Series CDP 2.3 r newer (management) CDP 5.1 r newer (reprting) Dell SnicWALL GMS 7.2 Release Ntes 3

4 Ntes: Release Ntes GMS 7.2 supprts Dell SnicWALL firewall App Cntrl plicy management and App Cntrl reprting supprt. Please refer t the SnicOS dcumentatin fr infrmatin n the supprted SnicOS firmware versins. Appliances running firmware newer than this GMS release can still be managed and reprts can still be generated. Hwever, the new features in the firmware release will be supprted in an upcming release f GMS. Legacy SnicWALL XPRS/XPRS2, SnicWALL SOHO2, SnicWALL Tele2, and SnicWALL Pr/Pr-VX mdels are nt supprted fr Dell SnicWALL GMS management. Appliances running SnicWALL legacy firmware including SnicOS Standard 1.x and SnicWALL legacy firmware 6.x.x.x are nt supprted fr GMS management. Nn-Dell SnicWALL Appliance Supprt Dell SnicWALL GMS prvides mnitring supprt fr nn-dell SnicWALL TCP/IP and SNMP-enabled devices and applicatins. Brwser Supprt Dell SnicWALL GMS uses advanced brwser technlgies such as HTML5, which are supprted in mst recent brwsers. Dell SnicWALL recmmends using the latest Chrme, Firefx, Internet Explrer, r Safari brwsers fr administratin f the Dell SnicWALL GMS. This release supprts the fllwing Web brwsers: Chrme 18.0 and higher (recmmended brwser fr dashbard real-time graphics display) Firefx 16.0 and higher Internet Explrer 8.0 and higher (d nt use cmpatibility mde) Nte: Internet Explrer versin 10.0 in Metr interfaces f Windws 8 is currently nt supprted. Mbile device brwsers are nt recmmended fr Dell SnicWALL GMS system administratin. Dell SnicWALL GMS 7.2 Release Ntes 4

5 Enhancements in GMS 7.2 Release Ntes The fllwing enhancements are included in the GMS 7.2 firmware release: IPv6 Supprt IPv6 is supprted in GMS 7.2, allwing the user t: Install GMS in an IPv6 netwrk envirnment. GMS can nw access varius Netwrk Elements using IPv6 addresses, such as: Firewalls, SMTP servers, RADIUS/LDAP Authenticatin Servers, SNMP Managers, WebServices, etc. Access GMS web interfaces n an IPv6 netwrk. Use these prducts t manage IPv6 features f Firewalls. Generate IPv6 based reprts. Mnitr Netwrk Elements using IPv6 addresses. Summarizer IPv6 and Enhanced Syslgs Syslg tags used by Summarizer fr IPv6 and enhanced syslgs are supprted. Federated Management & Reprting An easy way t create, mdify, r delete a plicy directly frm the Reprts panel. While viewing a reprt, right-click n a clumn that supprts this feature, then select Cnfigure Plicy. The crrespnding plicy screen displays, allwing the user t cnfigure the plicy withut having t navigate t the Plicy panel. Intrusin Reprting Enhancements Tw new reprts are added at rt level t the Intrusin reprts: Reprts > Intrusins > Details Reprts > Intrusins > Alerts Lg Analyzer Enhancements The Lg Analyzer interface is custmizable t allw expansin and easy distributin f clumns fr ease f navigatin. Scheduled Reprts Permissin Management In GMS 7.1, scheduled reprts created by an end user can nly be viewed and cnfigured by the creatr and Administratr. GMS 7.2 gives the scheduled reprt creatr the ability t manage permissins f the scheduled reprts s ther users in the deplyment can view and cnfigure the reprt. This feature is available t users within the LcalDmain ONLY. Syslgs sent by appliances that are nt under Reprting r Management Sme f the units which are n lnger managed by GMS send syslgs that create NMM files which impact perfrmance. In GMS 7.2, the user will be ntified if this ccurs and they can make the unit stp sending syslg messages. Firewall Lgin Enhancements This feature allws the GMS Administratr r equivalent t manage Firewalls using a nn-admin user with sufficient privileges t manage. Based n the user type, Lcal User r Remte User, the user credentials wuld be used by GMS t manage, mnitr, and reprt. Sticky Managed Address Mde This feature allws the GMS Administratr t manage a unit using a Static IP Address under any management mde. The sticky flag ensures the static address specified is nt verwritten with the IP address btained frm the syslg packet's header as it was happening in previus versins. As a result, the interface used t manage the unit can be different frm the ne used fr sending syslgs t GMS. Applicatin Level Data Archiving and Aging In GMS 7.1 data was nt deleted frm the applicatin table e.g. lgs and meta data tables, causing the number f rws t grw quickly in the tables, affecting verall perfrmance f the applicatin. In GMS 7.2 the cnsle lgs and applicatin meta data tables are aged and archived t fix this issue. Lcalizatin Supprt fr the Krean language is included in GMS 7.2. Disable archiving f syslgs t File System Added the ptin t disable string f archived syslgs. Imprt LDAP Users and User Grups LDAP user grups can be imprted n Dell SnicWALL appliances via GMS. Dell SnicWALL GMS 7.2 Release Ntes 5

6 Release Ntes Reverse DNS Supprt This feature enhances the quality f data by perfrming a reverse lkup n the private IPs (LAN Side) with a missing hstname sent by the firewall. The reverse lkup is perfrmed by lgging int the DNS server n the LAN side f the firewall. This functinality requires the GMS t be installed n the LAN side f the firewall, t be able t access the DNS Server. SnicOS Supprt SnicOS 5.9 and SnicOS 6.x and higher firmware versins are supprted t wrk with GMS 7.2. Future SnicOS firmware versins that are released after GMS 7.2 can still be managed and reprts can still be generated. Hwever, the new features in the firmware release will be supprted in an upcming release f GMS. The fllwing SnicOS enhancements are added: NTP Server Supprt Added ptins fr adding and editing NTP Servers in the System > Time screen. Rapid Spanning Tree Supprt Added a new screen under Switching called Rapid Spanning Tree which ffers frce versin, bridge pririty, hell time, and frward delay ptins. VLAN Trunk Switching Added a new screen is under Switching called VLAN Trunking. The tw fields: Starting VLAN ID and Ending VLAN ID are used t display reserved VLAN infrmatin and are read-nly fields. Rate Cntrl Switching Added a new screen called Rate Cntrl under the Switching screen grup. The Rate Cntrl table shws the name, ingress limit mde, ingress rate, egress rate, and flw cntrl. Layer 2 QS Switching A new screen called Layer 2 QS was added in the Switching grup. The DSCP Remap table shws 64 pririty levels with default value f nrmal. The Reset cntrl brings each pririty t its default value. Prt Security Switching A new screen called Prt Security was added t the Switching grup. This screen ffers these filters: By Default, Trunk Prts are nt displayed, LAG LACP enabled prts are als excluded, VLAN interfaces are als nt displayed. User Settings Enhancements Added several new ptins in the Users > Settings page, available at unit and grup level. Anti-Spam Settings Three new fields are added t the Anti-Spam > Settings page: Prbe Timeut, Use Destinatin Mail Server Private Address as Junk Stre Address, Junk Stre IP Address. Security Services Enhancements Added several new ptins in the Ge-IP Filter, Btnet Filter, Inheritance Preview Dialg, Gateway Anti-Virus, Intrusin Preventin, and Anti-Spyware screens. 3G/4G/Mdem > Cnnectin Prfile Enhancements A new ptin called Frce PAP Authenticatin is added t the 3G/4G/Mdem > Cnnectin Prfiles page. Wireless Enhancements Several enhancements are added t the Settings, Security, and Virtual Access Pint screens. Administrative Enhancements New ptins are added t the System > Administratr page. CFS Enhancements New Fields are added t the Cntent Filter > Settings and Websense pages. NTLM tab in Users > Settings A new NTLM tab is added in the Single Sign On Authenticatin Cnfiguratin windw. Per-Zne Enfrcement Settings New fields are added t the User > Settings > SSO Cnfiguratin > Enfrcement tab. Web Blck Page Enhancements A new Custmize Web Blck Page Settings sectin available in the Security Services > Btnet Filter page. Dell SnicWALL GMS 7.2 Release Ntes 6

7 Knwn Issues Release Ntes This sectin cntains a list f knwn issues in the GMS 7.2 release. Plicies Symptm Cnditin / Wrkarund Issue An LDAP Schema name may nt fully display in the LDAP Schema drp-dwn menu. Occurs when LDAP + Lcal Users settings are cnfigured and a schema is selected frm the LDAP Schema drp-dwn menu that cntains a large amunt f characters N cntent is displayed in the Security (ES) pane f the GMS user interface. The wrng interface is displayed at Grup level fr a Rute Plicy. The LDAP Schema settings d nt match in the GMS and Firewall user interfaces. A Mirrr interface cnfigured via GMS displays in the Firewall s user interface, but nt in the GMS user interface. Occurs when adding an Security device t GMS, then navigating t the ES pane f the GMS user interface. Occurs when creating a Rute Plicy at Unit level, then perfrming a Reverse Inheritance frm Unit t Grup level. Occurs when cnfiguring the LDAP Server settings, then navigating t the Schema tab and clicking the Update buttn Occurs when cnfiguring a Mirrr interface in the GMS Diagnstics > Packet Mnitr screen Reprts Symptm Cnditin / Wrkarund Issue The Reprts > Flw Activity > Real-Time Viewer screen displays the wrng date/time f the Flw Server and n reprts. Occurs when using an Internet Explrer (IE) Web brwser The wrng reprt is highlighted in the Reprts panel. Occurs when lading a custm reprt. Yu shuld be directed t the Reprts > Custm Reprts screen. Example: G t the Reprts > Data Usage > Initiatrs screen. Click the Lad Custm Reprt drp-dwn and select a custm reprt. Observe that the custm reprt is generated, but the Reprts panel still has Data Usage highlighted, instead f Custm Reprts Dell SnicWALL GMS 7.2 Release Ntes 7

8 Universal Scheduled Reprts Release Ntes Symptm Cnditin / Wrkarund Issue A Lcal Dmain user is able t prvide user Occurs when perfrming the fllwing: permissin t a Custm Dmain user that des 1. Lgin t GMS as the Admin frm nt have units/unit permissin. LcalDmain. 2. Add a new custm dmain, then add a user that des nt have units added/unit permissin. 3. G t Universal Scheduled Reprts > Add a Scheduled Reprt r Manage Scheduled Reprts. 4. In Permissin Management page, bserve that the user frm the Custm Dmain is displayed in user list that des nt have units/unit permissin. Reslved Issues This sectin cntains a list f issues reslved in the GMS 7.2 release. Appliance Symptm Cnditin / Wrkarund Issue Previusly upladed firmware cannt be deleted. Occurs when navigating t the System > File Manager screen in the UMA management interface, and then attempting t delete firmware that was previusly upladed Archived Syslgs / Backup Files Symptm Cnditin / Wrkarund Issue Decmpressin utilities d nt wrk fr unzipping cmpressed archived syslgs files r backup files. Occurs when un-zipping a cmpressed.zip file in a GMS Virtual Appliance r Universal Management Appliance Event Manager Symptm Cnditin / Wrkarund Issue Cannt edit alerts that were created by anther Occurs when a user tries t edit an alert that was user. created by anther user in the same user grup. Firewall Cnfiguratin Symptm Cnditin / Wrkarund Issue Firewall certificates cannt be imprted and the message "There are n changes made" displays in the status bar. Occurs when imprting a Firewall certificate via GMS Dell SnicWALL GMS 7.2 Release Ntes 8

9 Inheritance Release Ntes Symptm Cnditin / Wrkarund Issue Inheriting GMS settings des nt wrk n the first attempt. Occurs when inheriting GMS settings frm Grup t Unit level using frward inheritance. The first attempt des nt wrk, but the secnd is successful Frward inheritance creates a bad bject in the TZ appliance cnfiguratin. Occurs when creating Access Rules and Objects at Grup level and applying a frward inheritance Lgs Symptm Cnditin / Wrkarund Issue Changes t the Firewall Access Rules are nt reflected in the GMS Real-Time Syslg. Occurs when adding, editing, r deleting Access Rules via GMS n a Firewall running SnicOS r The changes display in the Firewall user interface, but nt in the GMS user interface Plicies Symptm Cnditin / Wrkarund Issue GMS creates a new rule instead f mdify the Occurs when attempting t change a rule frm existing. Allw t Deny. New Applicatin Grups are replacing the existing nes in the Match bjects list. Occurs when Add all Applicatin Grups is used and there are already grups present in the applicatin grups list Summarizer Symptm Cnditin / Wrkarund Issue The reprt summarizatin prcess becmes Occurs when sending syslgs with extended unrespnsive and the unit must be rebted. characters. Dell SnicWALL GMS 7.2 Release Ntes 9

10 Release Ntes Upgrading t GMS 7.2 This sectin prvides prcedures fr upgrading an existing Dell SnicWALL GMS 7.1 r newer installatin t GMS 7.2. GMS can be cnfigured fr a single server r in a distributed envirnment n multiple servers. GMS 7.2 can be installed as a fresh install r as an upgrade frm GMS 7.1. If yu wish t perfrm a fresh install f GMS 7.2, please refer t the GMS Getting Started Guide that relates t yur GMS deplyment. Upgrading Cnsideratins The 40 GB GMS Virtual Appliance shuld be installed in nn-prductin envirnments nly. Examples f nn-prductin envirnments include thse fr Prf f Cncept (POC), pilt, and dem deplyments. Only the 250 GB and 950 GB virtual appliances are supprted in prductin envirnments. It is nt pssible t upgrade a 40 GB virtual appliance t a 250 GB r 950 GB virtual appliance. Yu need t dwnlad the 250 GB r 950 GB virtual appliance if yu are planning t use this sftware nw r in the future fr a prductin envirnment. In nn-prductin envirnments, the amunt f syslg data cllected by the virtual appliance may exceed the 40 GB limit, in which case Dell SnicWALL will be unable t supprt the 40 GB virtual appliance. Fr appliances under management using a GMS Management Tunnel r Existing Tunnel, make sure that HTTPS management is allwed frm the GMS servers. This is because GMS 7.2 lgs int the appliances using HTTPS nly. The scheduled reprts created in GMS 7.1 will cntinue t wrk prperly after upgrading t 7.2. Hwever, the Legacy reprts created in GMS 6.0 r earlier versins will nt be migrated. Fr mre infrmatin n viewing legacy reprts, refer t the GMS Administratr s Guide. When perfrming a fresh installatin f GMS n Windws, the installer prmpts fr an IPv6 address f the server if it detects an IPv6 netwrk. Upgrading the GMS Virtual Appliance The GMS Virtual Appliance can be upgraded frm 7.1 t 7.2, but cannt be directly upgraded frm GMS versins earlier than 7.1. T upgrade the GMS Virtual Appliance frm a versin earlier than 7.1, yu need t upgrade t majr versins f GMS until yu reach 7.1, then yu can upgrade t GMS 7.2. Fr Dell SnicWALL GMS Virtual Appliance deplyments, upgrading frm the GMS 7.1 release t the GMS 7.2 release can be perfrmed n the System > Settings page. In a distributed envirnment, shut dwn all GMS servers except the ne that is running the database. Then upgrade the Cnsle/AIOP first and then the ther servers. Yu must upgrade all GMS servers in yur deplyment t the same versin f Dell SnicWALL GMS 7.2. Yu cannt have sme servers running versin 7.1 and thers running 7.2. Fr a fresh install f the GMS bit Virtual Appliance, please refer t the GMS Virtual Appliance Getting Started Guide. The fllwing files are available n MySnicWALL fr a fresh install: sw_gmsvp_vm_eng_ gb.64bit.va sw_gmsvp_vm_eng_ gb.64bit.va sw_gmsvp_vm_eng_ gb.64bit.va T upgrade, perfrm the fllwing steps: 1. Dwnlad the respective file frm the MySnicWALL.cm Sftware Dwnlad Center t yur wrkstatin: sw_gmsvp_vm_eng_ gmsvp-updater.64bit.sh 2. Lg int the /appliance (System) interface f the GMS server. 3. Navigate t the System > Settings page. 4. Click n the Brwse buttn, navigate t the lcatin where yu saved the abve file, and then select it. 5. Click the Apply buttn t begin the firmware upgrade installatin. Dell SnicWALL GMS 7.2 Release Ntes 10

11 Release Ntes Upgrading the GMS UMA EM5000 Appliance Fr the Dell SnicWALL UMA EM5000 appliance, upgrading frm the GMS 7.1 release t the GMS 7.2 release can be perfrmed n the System > Settings page. Fr a fresh install f GMS 7.2, please refer t the GMS UMA EM5000 Getting Started Guide. In a distributed envirnment, stp all GMS services n all GMS servers befre perfrming an upgrade. Yu must upgrade all GMS servers in yur deplyment t the same versin f Dell SnicWALL GMS 7.2. Yu cannt have sme servers running versin 7.1 and thers running 7.2. T upgrade the UMA EM5000 appliance, perfrm the fllwing: 1. Dwnlad the firmware file frm the MySnicWALL.cm Sftware Dwnlad Center t yur wrkstatin: sw_uma_em5000_eng_ gmsvp-updater.sh 2. Lg int the /appliance (System) interface f the UMA EM5000 appliance. 3. Navigate t the System > Settings page. 4. Click n the Brwse buttn, navigate t the lcatin where yu saved the abve file, and then select it. 5. Click the Apply buttn t begin the firmware upgrade installatin. Dell SnicWALL GMS 7.2 Release Ntes 11

12 Online Training Materials Release Ntes Dell SnicWALL Technical Training Services ffers GMS sftware and UMA appliance elearning fr essential security administratr certificatin. This Certified Dell SnicWALL Security Administratr (CSSA) curse prvides fundamental instructins t help yu understand the basic deplyment best practices fr Managed Security Service Prviders. The fllwing link prvides the latest infrmatin regarding Dell SnicWALL GMS elearning curses: Click n the Glbal Management System Certificatin Training link. Dell SnicWALL GMS 7.2 Release Ntes 12

13 Related Technical Dcumentatin Release Ntes Dell SnicWALL reference dcumentatin is available n the Dell Sftware Supprt site: Datasheets, white papers, and ther prduct infrmatin are available n the Dell Sftware Prducts website: Knwledge articles and links t related cmmunity frums and ther resurces are available at: Dell SnicWALL GMS vide training is available frm the GMS Develpment Team: Last updated: 10/1/2014 Dell SnicWALL GMS 7.2 Release Ntes 13