This chapter describes how to use the SonicWALL Security Dashboard feature on a SonicWALL security appliance. This chapter contains the following sections:
This section provides an introduction to the Security Dashboard feature. This section contains the following subsections:
After reading the Security Dashboard Overview section, you will be familiar with this feature and its benefits.
The SonicWALL Security Dashboard provides reports of the latest threat protection data from a single SonicWALL appliance and aggregated threat protection data from SonicWALL security appliances deployed globally. The SonicWALL Security Dashboard displays automatically upon successful authentication to a SonicWALL security appliance, and can be viewed at any time by navigating to the System > Security Dashboard menu in the left-hand menu.
Reports in the Security Dashboard include:
Each report includes a graph of threats blocked over time and a table of the top blocked threats. Reports, which are updated hourly, can be customized to display data for the last 12 hours, 14 days, 21 days, or 6 months. For easier viewing, SonicWALL Security Dashboard reports can be transformed into a PDF file format with the click of a button.
The Security Dashboard provides the latest threat protection information to keep you informed about potential threats being blocked by SonicWALL security appliances. If you subscribe to SonicWALL’s security services, including Gateway Anti-Virus, Gateway Anti-Spyware, Intrusion Prevention Service (IPS), and Content Filtering Service, you are automatically protected from the threats reported by the SonicWALL Security Dashboard. SonicWALL’s security services include ongoing new signature updates to protect against the latest virus and spyware attacks. For information about activating SonicWALL security services, refer to “Wizards > Registration & License Wizard” .
The Security Dashboard provides insight into threats over time, and can be configured to display data from multiple time periods. The SonicWALL Security Dashboard can be viewed easily in the System > Security Dashboard page of the SonicWALL appliance management interface, or as a custom generated PDF file.
The SonicWALL Security Dashboard provides global and appliance-level threat protection statistics. At the appliance level, threat protection data from your SonicWALL security appliance is displayed. At the global level, the SonicWALL Security Dashboard is updated hourly from the SonicWALL backend server with aggregated threat protection data from globally-deployed SonicWALL security appliances. Data provided by the SonicWALL backend server is cached locally for reliable delivery.
To be protected from the threats reported in the SonicWALL Security Dashboard, it is recommended that you purchase SonicWALL security services. For more information about SonicWALL security services, see “Security Services” .
|
Note
|
The SonicWALL security appliance must have Internet connectivity (including connection to
a DNS server) to receive the latest threat protection statistics from the SonicWALL backend server, which reports aggregated data from globally deployed SonicWALL security appliances. If you lose connectivity, cached data from the last update will display, and the latest data will not be available until connectivity is restored.
|
The Security Dashboard is available on the SonicWALL security appliances running SonicOS Enhanced firmware versions 5.0 and higher.
This section contains the following subsections:
SonicWALL security appliances must be set up and registered on mysonicwall.com. For
registration instructions, refer to the SonicWALL Getting Started Guide
for your security appliance, available on the Web at:
http://www.sonicwall.com/us/Support.html
.
|
Note
|
The SonicWALL security appliance must be configured for Internet connectivity and be
connected to the Internet to display the latest reports.
|
The SonicWALL Security Dashboard can be configured to display global or appliance-level statistics, to display statistics for different time periods, and to generate a custom PDF file. For information about purchasing SonicWALL security services that protect against the threats reported in the SonicWALL Security Dashboard, refer to “Wizards > Registration & License Wizard” .
The SonicWALL Security Dashboard displays automatically upon successful login to a SonicWALL security appliance. You can access the SonicWALL Security Dashboard at any time by navigating to System > Security Dashboard in the left-hand menu. You may see the introductory screen shown below before the dashboard displays.
This section provides the following subsections:
To view SonicWALL Security Dashboard global reports, select the radio button next to Global in the top of the System > Security Dashboard screen. To view appliance-level reports, select the radio button next to the appliance serial number.
The SonicWALL Security Dashboard reports default to a view of reports from the “Last 14 Days,” providing an aggregate view of threats blocked during that time period. You can configure each report to one of four optional time periods. Each report can be configured to reflect a different time period. To change a report to reflect a different time period, perform the following steps:
|
Step 2
|
|
–
|
Last 12 Hours
- The selected report will display threat information from the last 12 hours
|
|
–
|
Last 14 Days
- The selected report will display threat information from the last 14 days
|
|
–
|
Last 21 Days
- The selected report will display threat information from the last 21 days
|
|
–
|
Last 6 Months
- The selected report will display threat information from the last 6 months
|
To create a PDF version of the SonicWALL Security Dashboard, first select the desired view (global or appliance-level) and the desired time period for each report (the last 12 hours, 14 days, 21 days, or 6 months). Click the button at the top of the page.