SonicWall Analyzer 8.4 SP1 December 2017 These release notes provide information about the SonicWall Analyzer 8.4 SP1 release. Topics: About Resolved Issues Known Issues Platform Compatibility Upgrading to Analyzer 8.4 SP1 Product Licensing SonicWall Support About release provides support for the Sonic OS 6.2.9 release, support for SonicOS 6.2.7.7 for the SuperMassive 9800, as well as performance improvements, bug fixes, and vulnerability updates that address a number of known issues from previous releases. See the Resolved Issues section. 1
Resolved Issues The following is a list of issues addressed in this release. Reporting Resolved Issue The correct time does not appear in Reports, which is showing it as one hour behind and not being adjusted for Daylight Saving time (kicked off on Oct 15) for Brazil time. This issue applies to the firewalls installed in the countries shown below: Issue ID 194921 Perform the following steps to correct the time zones for the affected countries: 1 Log into your firewall. 2 For a firewall running SonicOS 6.5 or later, navigate to System Setup Appliance > System Time on the MANAGE view. (On legacy firewalls navigate to System > Time.) 3 Based on the country the firewall is in and the time zone, set the Time Zone field on the firewall to be the same as the Time zone to be selected for the firewall from the table above. 4 Validate the setting for Automatically adjust clock for daylight saving time. Check the box to enable the option if required by the table, or uncheck it to disable to option. 5 Click ACCEPT to save the new setting. 2
Reporting (Continued) Resolved Issue Issue ID Summarizer fails and disk space fills. 193913 Occurs because of the java.lang.stringindexoutofboundsexception syslog. Unable to set cost per megabyte data use to a zero value. 193803 The Daily and weekly SWARM reports are empty. 193616 The times on some Analyzer logs do not relate to the correct time zones. 167143 The scheduled subscription report shows incorrect data. 160079 Occurs when there are no firewall units with subscription services expiring within 90 days. Universal Scheduled Reports Resolved Issue Scheduled Reports for Secure Mobile Access contain no data. Occurs after upgrading to Analyzer 8.4. Issue ID 195035 Known Issues Analyzer 8.4 SP1 is not supported for Windows 10 or Windows 2016. The following is a list of issues known to exist at the time of the Analyzer 8.4 SP1 release. Reports Panel Known Issue Issue ID Saving custom reports deselects the overwrite existing report option. 196901 Universal Schedule Known Issue Issue ID Deleting daily or weekly scheduled SWARM reports returns error messages. 197140 Universal Scheduled Reports (USR) report PDF files do not provide the names of the firewalls 193449 with No Matching Reports Found. Universal Scheduled Reports (USR) for Flow Reporting does not return PDF reports in the 193187 selected language. Platform Compatibility The release can be hosted in two deployment scenarios as follows: Microsoft Windows Server Software VMware ESXi Virtual Appliance 3
Deployment Considerations: Before selecting a platform to use for your Analyzer deployment, use the Capacity Planning tool at https://www.sonicwall.com/en us/products/firewalls/management and reporting/global managementsystem. This helps you set up the correct Analyzer system for your deployment. CAUTION: SonicWall recommends that you take steps to minimize abrupt shutdowns of the server hosting Analyzer, as this can cause corruption of the Reporting database, potentially leading to loss of data for the current month. A possible solution includes using an Uninterrupted Power Supply (UPS). Before installing Analyzer 8.4 SP1, ensure that your system meets the minimum hardware and software requirements described in the following sections: Supported Platforms Hardware Requirements Hard Drive HDD Specifications Analyzer Virtual Appliance Supported Platforms Virtual Appliance Deployment Requirements Analyzer Virtual Appliance Hardware Resource Requirements Browser Requirements SonicWall Appliances Supported for Analyzer Reporting Upgrading an Analyzer Software Installation Upgrading an Analyzer Virtual Appliance Supported Platforms The SonicWall Analyzer supports the following Microsoft Windows operating systems: Windows Server 2016 Standard Windows Server 2012 Standard 64 bit Windows Server 2012 R2 Standard 64 bit (English and Japanese language versions) Windows Server 2012 R2 Datacenter Windows 8.1 64 bit Windows 7 64 bit These Windows systems can either run in physical standalone hardware platforms, or as a virtual machine under Windows Server 2012 Hyper V or ESXi. TIP: For best performance and scalability, it is recommended to use a 64 bit Windows operating system. Bundled databases run in 64 bit mode on 64 bit Windows operating systems. All listed operating systems are supported in both virtualized and non virtualized environments. In a Hyper V virtualized environment, Windows Server is a guest operating system running on Hyper V. Analyzer is then installed on the Windows Server virtual machine that is layered over Hyper V. NOTE: Analyzer 8.4 SP1 is not supported on MS Windows Server virtual machines running in cloud services, such as Microsoft Azure and Amazon Web Services EC2. 4
Hardware Requirements To determine the hardware requirements for your deployment, use the Capacity Planning Tool at https://www.sonicwall.com/en us/products/firewalls/management and reporting/global management system. NOTE: A Windows 64 bit operating system with at least 8GB of RAM is highly recommended for better performance of reporting modules. (For even better performance, use at least 32GB memory.) Hard Drive HDD Specifications The following hard drive HDD specifications are required when using Analyzer Software on a Windows Server or a Analyzer Virtual Appliance: Hardware Requirements Requirement Spindle Speed Cache Transfer rate Average latency Details 7,200 RPM or higher 64 MB or higher 600 MBs or higher 4 microseconds or lower Analyzer Virtual Appliance Supported Platforms The elements of basic VMware structure must be implemented prior to deploying the SonicWall Analyzer Virtual Appliance. The Analyzer Virtual Appliance runs on the following VMware platforms: ESXi 6.5, 6.0 and 5.5 Virtual Appliance Deployment Requirements Consider the following before deploying the Analyzer Virtual Appliance: Analyzer management is not supported on Apple MacOS. All modules are 64 bit. Analyzer Virtual Appliance Hardware Resource Requirements To determine the hardware requirements for your deployment, use the Capacity Planning Tool at https://www.sonicwall.com/en us/products/firewalls/management and reporting/global management system. The performance of Analyzer Virtual Appliance depends on the underlying hardware. It is highly recommended to dedicate all the resources that are allocated to the Virtual Appliance, especially the hard disk (datastore). In environments with high volumes of syslogs or AppFlow (IPFIX), you will need to dedicate local datastores to the Analyzer Virtual Appliance. The Virtual Appliances are 64 bit, which take advantage of additional RAM available to it. A minimum of 4GB RAM is required. However, at least 8GB of RAM is highly recommended for better performance of reporting modules. 5
Browser Requirements SonicWall Analyzer uses advanced browser technologies such as HTML5, which are supported in most recent browsers. SonicWall recommends using the latest Chrome, Firefox, Internet Explorer, or Safari browsers for administration of the SonicWall Analyzer. This release supports the following Web browsers: Chrome 42.0 or higher (recommended browser for dashboard real time graphics display) Firefox 37.0 or higher Internet Explorer 11.0 or higher (do not use compatibility mode) NOTE: Internet Explorer version 10.0 in Metro interfaces of Windows 8 is not currently supported. NOTE: Turn off Compatibility Mode when accessing the Analyzer management interface with Internet Explorer. For more information, see the Knowledge Base article located at: http://www.sonicwall.com/enus/support/knowledge base/170502904412584 Mobile device browsers are not recommended for SonicWall Analyzer system administration. NOTE: If using Chrome version 42 and newer to access Analyzer 7.2 and older, you will need to enable NPAPI support in Chrome, which by default has been disabled starting with version 42. SonicWall Appliances Supported for Analyzer Reporting supports the following SonicWall appliances and firmware versions: Component Requirements SonicWall Platforms Network Security Appliance SuperMassive 10000 Series SuperMassive 9000 Series NSA Series TZ Series and TZ Wireless SonicWall SOHO and SOHO Wireless Email Security Series Secure Mobile Access SMA 6200/7200 SRA/SSL VPN Series SonicWall Firmware Version SonicOS 6.0 or newer NOTE: Only partial policy management and reporting support is currently available. Contact your SonicWall Sales representative through https://www.sonicwall.com/en us/support for more information. SonicOS 6.1 or newer SonicOS 5.0 or newer SonicOS 5.0 or newer SonicOS 6.2.6 or newer Email Security 7.2 or newer (management only) SMA 10.7.2 or newer SSL VPN 2.0 or newer (management) SSL VPN 2.1 or newer (management and reporting) 6
Component Requirements (Continued) SonicWall Platforms SonicWall Firmware Version E Class SRA Series E Class SRA 9.0 or newer Notes: Appliances running firmware newer than this Analyzer release can still generate reports. However, the new features in the firmware release will be supported in an upcoming release of Analyzer. Legacy SonicWall XPRS/XPRS2, SonicWall SOHO2, SonicWall Tele2, and SonicWall Pro/Pro VX models are not supported for SonicWall Analyzer reporting. Appliances running SonicWall legacy firmware including SonicOS Standard 1.x and SonicWall legacy firmware 6.x.x.x are not supported for SonicWall Analyzer reporting. SonicWall Analyzer can be connected to SSL VPN 2000 and 4000 appliances. Use the Log > ViewPoint page to set up the Analyzer connection (in addition to the configuration changes made on the Analyzer). In SonicWall SRA SSL VPN 5.5 or later firmware versions, a Log > Analyzer page is provided for configuration of Analyzer settings. Upgrading to Analyzer 8.4 SP1 This section provides procedures for upgrading an existing SonicWall Analyzer 8.4 installation to Analyzer 8.4 SP1. Analyzer can be configured for a single server or in a distributed environment on multiple servers. Analyzer 8.4 SP1 is NOT a fresh install. To upgrade to Analyzer 8.4 SP1, you have to be running Analyzer 8.4. For information about a fresh install of Analyzer 8.4, refer to the Analyzer Getting Started Guide that relates to your Analyzer deployment. Consider the following before upgrading to Analyzer 8.4 SP1: The 40GB Analyzer Virtual Appliance should be installed in non production environments only. Examples of non production environments include those for Proof of Concept (POC), pilot, and demo deployments. Only the 250GB and 950GB Virtual Appliances are supported in production environments. It is not possible to upgrade a 40GB Virtual Appliance to a 250GB or 950GB Virtual Appliance. You need to download the 250GB or 950GB Virtual Appliance if you are planning to use this software now or in the future for a production environment. In production environments, the amount of syslog data collected by the Virtual Appliance may exceed the 40GB limit, in which case SonicWall will be unable to support the 40GB Virtual Appliance. You must disable the User Account Control (UAC) feature on Windows before running the Analyzer installer. In addition, disable Windows Firewall or your personal firewall before running this installer. For appliances under management using a Analyzer Management Tunnel or Existing Tunnel, make sure that HTTPS management is allowed from the Analyzer servers. This is because Analyzer 8.4 SP1 logs into the appliances using HTTPS only. The scheduled reports created in Analyzer 8.0 continue to work properly after upgrading to 8.4 SP1. However, the Legacy reports created in Analyzer 6.0 or earlier versions are not migrated. For more information on viewing legacy reports, refer to the Analyzer Administration Guide. When performing a fresh installation of Analyzer on Windows, the installer prompts for an IPv6 address of the server if it detects an IPv6 network. In a distributed environment, shut down all Analyzer servers except the one that is running the database. Analyzer servers with the SonicWall Universal Management Suite Database service should be upgraded first, 7
and then you can upgrade the other servers. You must upgrade all Analyzer servers in your deployment to the same version of Analyzer. You cannot have some servers running version 8.4 SP1 and others running 8.4. NOTE: DO NOT start/stop the SonicWall Universal Management Suite Database service manually, before or after upgrading to 8.4 SP1. After the upgrade, the SonicWall Universal Management Suite Database service will be down until the MySQL upgrade process has completed as well. Log in to the /appliance UI to track the progress. Upgrading an Analyzer Software Installation To upgrade an Analyzer Software (Windows) installation to Analyzer 8.4 SP1, complete the following steps: 1 Navigate to www.mysonicwall.com and download the Analyzer 8.4 SP1 file to your workstation software: sw_gmsvp_all_eng_8.4.xxxx.yyyy.<file format>: where xxxx is the major build number and yyyy is the minor build number. 2 Log in to the /appliance (System) interface of the Analyzer server. 3 Navigate to the System > Settings page. 4 Click Browse, navigate to the location where you saved the above file, and select the first necessary file. 5 Click Apply to begin the firmware upgrade installation. 6 Reboot the Windows Analyzer system after installation. NOTE: In Windows, after an installation or Service Pack, Analyzer might not reboot itself or sometimes the System > Settings page goes blank. Manually reboot the Windows system before proceeding any further. Upgrading an Analyzer Virtual Appliance To upgrade an Analyzer Virtual Appliance, complete the following: 1 Download the Analyzer 8.4 SP1 file from www.mysonicwall.com to your workstation software: sw_gmsvp_all_eng_8.4.xxxx.yyyy.<file format>: where xxxx is the major build number and yyyy is the minor build number. 2 Log in to the /appliance (System) interface of the Analyzer server. 3 Navigate to the System > Settings page. 4 Click Browse, navigate to the location where you saved the above files, and select the first necessary file. 5 Click Apply to begin the firmware upgrade installation. 6 The Virtual Appliance reboots at the end of the installation process. Product Licensing All instances of the SonicWall Analyzer Software must be registered and licensed before use. This requirement applies to single server deployments, to fresh or upgraded installations, and to Software installations on Windows servers or VMware Virtual Appliances. The Analyzer Software registration is performed using the /appliance SonicWall Universal Management Host (UMH) system interface. When installing the Universal Management Suite on a server or host, a Web server is installed to provide the UMH system interface. The system interface is available by default after restarting the system at: https://localhost/. On SonicWall appliances that send reporting data to the Analyzer, Analyzer is licensed and activated separately from the SonicWall appliances. MySonicWall provides a way to associate SonicWall appliances with the Analyzer instance. Log in or register for a MySonicWall account at https://mysonicwall.com. 8
SonicWall Support Technical support is available to customers who have purchased SonicWall products with a valid maintenance contract and to customers who have trial versions. The Support Portal provides self help tools you can use to solve problems quickly and independently, 24 hours a day, 365 days a year. To access the Support Portal, go to https://www.sonicwall.com/en us/support. The Support Portal enables you to: View knowledge base articles and technical documentation View video tutorials Access MySonicWall Learn about SonicWall professional services Review SonicWall Support services and warranty information Register for training and certification Request technical support or customer service To contact SonicWall Support, visit https://www.sonicwall.com/en us/support/contact support. To view the SonicWall End User Product Agreement, go to: https://www.sonicwall.com/en us/legal/licenseagreements. Select the language based on your geographic location to see the EUPA that applies to your region. 9
Copyright 2017 SonicWall Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. SonicWall is a trademark or registered trademark of SonicWall Inc. and/or its affiliates in the U.S.A. and/or other countries. All other trademarks and registered trademarks are property of their respective owners. The information in this document is provided in connection with SonicWall Inc. and/or its affiliates' products. No license, express or implied, by estoppel or otherwise, to any intellectual property right is granted by this document or in connection with the sale of SonicWall products. EXCEPT AS SET FORTH IN THE TERMS AND CONDITIONS AS SPECIFIED IN THE LICENSE AGREEMENT FOR THIS PRODUCT, SONICWALL AND/OR ITS AFFILIATES ASSUME NO LIABILITY WHATSOEVER AND DISCLAIMS ANY EXPRESS, IMPLIED OR STATUTORY WARRANTY RELATING TO ITS PRODUCTS INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON INFRINGEMENT. IN NO EVENT SHALL SONICWALL AND/OR ITS AFFILIATES BE LIABLE FOR ANY DIRECT, INDIRECT, CONSEQUENTIAL, PUNITIVE, SPECIAL OR INCIDENTAL DAMAGES (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, BUSINESS INTERRUPTION OR LOSS OF INFORMATION) ARISING OUT OF THE USE OR INABILITY TO USE THIS DOCUMENT, EVEN IF SONICWALL AND/OR ITS AFFILIATES HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SonicWall and/or its affiliates make no representations or warranties with respect to the accuracy or completeness of the contents of this document and reserve the right to make changes to specifications and product descriptions at any time without notice. SonicWall Inc. and/or its affiliates do not make any commitment to update the information contained in this document. For more information, visit https://www.sonicwall.com/legal/. Legend WARNING: A WARNING icon indicates a potential for property damage, personal injury, or death. CAUTION: A CAUTION icon indicates potential damage to hardware or loss of data if instructions are not followed. IMPORTANT NOTE, NOTE, TIP, MOBILE, or VIDEO: An information icon indicates supporting information. Last updated: 12/21/17 232 004169 00 Rev A 10