https://support.software.dell.com/kb/sw9695

Analyzer: SonicWALL Analyzer 7.0 Frequently asked questions (SW9695)

Title Analyzer: SonicWALL Analyzer 7.0 Frequently asked questions
Resolution
Article Applies to:

SonicWALL Analyzer: Software on Windows
SonicWALL Analyzer: Virtual Appliance
Service: FAQ


1. What is SonicWALL Analyzer?

SonicWALL® Analyzer is a new stand-alone product. It is an easy-to-use web-based traffic analytics and reporting tool that provides real-time and historical insight into the health, performance and security of the network. Analyzer supports SonicWALL firewalls, backup and recovery products, and secure remote access solutions. Organizations of all sizes benefit from enhanced employee productivity, optimized network bandwidth utilization and increased security awareness. SonicWALL is the only firewall vendor that provides a complete solution by combining off-box application traffic analytics with granular data generated by SonicWALL firewalls.

Features and Benefits

• Comprehensive graphical reports - on firewall threats, bandwidth usage statistics, and application traffic analysis, provides organizations visibility into employee productivity and suspicious network activity.

• Next-gen syslog reporting - uses revolutionary architecture enhancements to streamline data summarization, allowing for near real-time reporting of incoming syslog messages. Direct access to the underlying raw data further facilitates extensive granular capabilities and highly customizable reporting.

• SonicWALL Secure Remote Access (SRA) and Continuous Data Protection (CDP) event reporting - leverages next-generation syslog data to provide powerful insight into the appliance’s health and behavior.

• Universal scheduled reports - provide a single entry point for all scheduled reports. One report can combine charts and tables for multiple units. Reports can be scheduled and sent out in various formats to one or more email addresses.

• At-a-glance reporting - offers customizable views to illustrate multiple summary reports on a single page. Users can easily navigate through vital network metrics to analyze data quickly across a variety of reports.

• Compliance reporting - enables administrators to generate reports that fulfill compliance requirements on an ad-hoc and scheduled basis for specific regulatory mandates.

• Multi-threat reporting - collects information on thwarted attacks providing instant access to threat activities detected by SonicWALL firewalls using the SonicWALL Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, and Application Intelligence and Control Service.

• User-based reporting - tracks individual user activities locally or on remote network sites to provide even greater insight into traffic usage across the entire network and, more specifically, application usage, web sites visited, backup activity and VPN connections per user.

• Ubiquitous access - simplifies reporting to provide administrators with analysis of any location using only a standard web browser.

• New attack intelligence - offers granular reporting on specific types of attacks or intrusion attempts and the source address of the attack to enable administrators to react quickly to incoming threats.


2. What is the difference between SonicWALL Analyzer, Viewpoint and GMS software?

Please refer the following chart for complete comparison: http://www.sonicwall.com/us/products/Analyzer.html#tab=compare

Please note that the new SuperMassive and NSA hardware NSA 220, 220W, 250M, 250MW products require Analyzer software for reporting, legacy Viewpoint is not supported.


3. What has changed in the licensing mechanism?


Analyzer is a new standalone product. The Analyzer software itself is free but it can only report on a SonicWALL device if that specific SonicWALL device is licensed for Analyzer.

A SonicWALL firewall appliance can be licensed for both ViewPoint and Analyzer as the ViewPoint and Analyzer license are two separate licenses. SRA and CDP appliances can now be licensed for Analyzer.

ViewPoint customers can upgrade their ViewPoint software deployment (that is the software deployed on a separate Windows server or as a Virtual Apliance) to Analyzer but will have to purchase new Analyzer licenses for each appliance they would like to report on using SonicWALL Analyzer. There’s no credit for having existing ViewPoint licenses.

Customers can try out Analyzer easily by activating the 30 day trial license for Analyzer on the devices they would like to report on using Analyzer. However, if customers would like to continue using Analyzer they will have to purchase and activate an Analyzer retail licenses for each appliance.

Analyzer is not part of the Comprehensive Gateway Security Suite (CGSS) bundle.


4. Where can I download the SonicWALL Analyzer software?

The SonicWALL Analyzer software is a free download. To download Analyzer, navigate to the Free Downloads section under Downloads in the left navigation bar of www.mysonicwall.com and look for “GMS/ Analyzer”.

NOTE: To report on a SonicWALL device using SonicWALL Analyzer, that specific device has to be licensed for SonicWALL Analyzer. For this you can either use a production license key or a 30-day trial license.


Click To See Full Image.



5. How can I try out SonicWALL Analyzer?

You can try out Analyzer easily by activating a 30-day trial license for Analyzer on the devices you would like to report on using Analyzer. However, if you would like to continue using Analyzer you will have to purchase and activate an Analyzer retail licenses for each appliance.

A SonicWALL Analyzer license key can be activated on www,mySonicWALL.com as follows. Click on My Products in the left navigation bar and select the device you would like to report on. This will take you to the Service Management page for that specific device. Scroll down to the Desktop & Server Software section under Applicable Services and look for Analyzer. Buttons on the right hand side allow you to buy the Analyzer key, activate a 30-day trial, or enter a key obtained from a SonicWALL partner.

Note: Analyzer license is independent of the ViewPoint license and must be purchased separately for all devices you wish to manage/see reports in Analyzer. A SonicWALL UTM appliance can be licensed for both ViewPoint and Analyzer as they are two separate licenses.



Click To See Full Image.




6. Can the SonicWALL appliances send syslogs to both an Analyzer and ViewPoint deployment simultaneously?

Yes, SonicWALL appliances can send syslogs to both Analyzer and Viewpoint.


7. Can I upgrade from ViewPoint 6.0 to Analyzer 7.0?

Customers can upgrade their ViewPoint software deployment to Analyzer 7.0 but will have to purchase new Analyzer licenses for each appliance they would like to report on using SonicWALL Analyzer. There’s no credit for having existing ViewPoint licenses.

Please Note: After the upgrade to Analyzer 7.0 new reports can only be generated using the new Analyzer reporting infrastructure. Old Viewpoint reports can be viewed under legacy reports session (it is not possible to view both 7.0 and pre-7.0 reports in the same session), see How do I view ViewPoint 6.0 reports (legacy report)? below.


Caution: Downgrade from Analyzer to ViewPoint is not supported; if a customer is not sure then they should probably install Analyzer on a seperate server and not upgrade their existing ViewPoint deployments. SonicWALL appliances can send syslogs to both Analyzer and Viewpoint.
Upgrade from 6.0 to 7.0 is quite straight forward: download the Analyzer 7.0 upgrade file (sw_gmsvp_win_eng_7.0.7027.1736.exe) and then install the new Analyzer version.

Steps to upgrade:

• It is highly recommended that you backup your database, GMSVP installation folders, and the <GMSVP installation folder>confsgmsConfig.xml file.

• Log on to your SonicWALL Viewpoint computer as administrator. Launch the SonicWALL Universal Management Suite 7.0 installer, by double-clicking the file sw_gmsvp_win_eng_7.0.xxxx.xxxx.exe (where “xxxx” are the exact version numbers). It may take several seconds for the Install-Anywhere self extractor to initialize.

• In the Introduction screen, click Next.
• In the License Agreement screen, select the radio button next to I accept the terms of the License Agreement. Click Next.
• Wait while the installer prepares to install SonicWALL UMS on your system.
• Click Install to upgrade your installation.
• The Installer detects the previous installation of SonicWALL Viewpoint. Click Install to proceed with the upgrade.
• If you see a Windows Security Alert for Java, click Unblock.
• The installer displays a progress bar as the files are installed. Wait a few minutes for the installer to finish installing.

• After the files are installed, whether or not the system has a Personal Firewall such as Windows Firewall enabled, a dialog is displayed notifying you to either disable the firewall or manually open the syslog and SNMP ports, and to ensure that these ports are open on your network gateway or firewall if you plan to use HTTPS Management mode for managing remote appliances. Click OK. Be sure to adjust the settings as recommended.

• The final installer screen contains the path of the installation folder, and warns you that the Universal Management Suite Web page will be launched next. Click Done.


8.How do I view ViewPoint 6.0 reports (legacy report)?

Reports generated by pre 7.0 releases of SonicWALL Analyzer are still available for viewing. Analyzer 7.0 Reporting is not compatible with earlier versions, but reports generated by earlier versions are still accessible under the Analyzer reporting Infrastructure.

Because it is not possible to view both 7.0 and pre-7.0 reports in the same session, we advise creating a separate Login for accessing Legacy reports. This allows switching back and forth, as you can only view 7.0 or pre 7.0 reports in a session. By creating a separate login, you can switch between viewing modes.


a. Create a new User or Administrator login. An Administrator login (with a name like Admin_Legacy) is recommended, as this login will have full privileges. For more information on configuring Legacy reports for new user, refer to the Console Management section.

b. Log into the Management > Users > Action Permissions tab.

c. Set flag in the checkbox for Show Legacy (pre Analyzer 7.0) Reports. This check box is only available if ViewPoint 6.0 Reports exist in the system.


Click To See Full Image.



d. Log out; log back in using the new Login created in Step 1.


9. Will there be new versions of ViewPoint?

No, 6.0 is the last version of ViewPoint that SonicWALL will develop.


10. Can I use Analyzer 7.0 with third generation devices (GEN 3, for example the TELE3 device)?

No, only GEN 4 and GEN 5 devices are supported. Please refer to analyzer 7.0 Administrator Guide for a full list of supported products. Older products (GEN 1 and 2) are not supported in Analyzer 7.0 either.


11. Can I use ViewPoint 6.0 with new NSA products (NSA 220, NSA 250…)?

No, ViewPoint cannot be used with products that have been introduced close before or after Analyzer 7.0 release. Please refer to your product’s admin guide for more details.

Please note that the new SuperMassive and NSA hardware NSA 220, 220W, 250M, 250MW products require Analyzer software for reporting, legacy Viewpoint is not supported.

Download Admin and Documentation here:
https://support.software.dell.com/sonicwall-analyzer/release-notes-guides

Full Support KB here:
https://support.software.dell.com/kb/sw9695

Liquid Layer Networks | Cloud Web Hosting
http://liquidlayer.net