Key Features in GMS 7.2

The following are the key features introduced in GMS 7.2.

•	Web Proxy Support — Supports the inclusion of certain client objects and the exclusion of certain server objects.

•	Web Management Settings — Supports the allowance of the Suite B Mode in HTTPS.

•	User Settings — New support for User Web Login Settings.

•	Firewall Settings — Supports firewall domain names.

•	Secondary Management IP Address for High Availability (HA) — Support for a secondary management IP address when High Availability is enabled.

•	PPP for L2TP Server Settings — New option to add allowed authentication protocols in a preferred order.

•	IPv6 Support — IPv6 is supported in GMS 7.2 SP2, allowing the user to:

•	Set IPv6 Advanced Configuration Settings. GMS supports advanced settings for generating IPv6 ICMP destination unreachable packets, redirect packets, and parameter problem packets. Also supports the ability to enable NetBIOS name query responses for ISATAP

•	Install these products in an IPv6 network environment. This means that GMS can now access various network elements using IPv6 addresses, such as: firewalls, SMTP servers, RADIUS/LDAP authentication servers, SNMP managers, web services, and so on

•	Access the GMS web management interfaces on an IPv6 network.

•	Use these products to manage IPv6 features of Firewalls.

•	Generate IPv6 based reports.

•	Monitor Network Elements using IPv6 addresses.

•	Summarizer IPv6 and Enhanced Syslog — Supports Syslog tags used by the summarizer for IPv6 and enhanced syslog messages are supported.

•

Federated Management & Reporting — An easy way to create, modify, or delete a policy directly from the Reports panel. While viewing a report, the administrator can right-click on a column that supports this feature, then select Configure Policy. The policy screen displays, allowing the user to configure the policy.

•	Intrusion Reporting Enhancements — Two new reports are added at root level to the Intrusion reports:

•	Reports > Intrusions > Details

•	Reports > Intrusions > Alerts

•	Log Analyzer Enhancements — The Log Analyzer interface is enhanced to allow expansion and easy distribution of columns for navigation.

•

Scheduled Report Permission Management — Scheduled reports created by the end user can only be viewed and configured by the report creator and administrator. GMS 7.2 SP2 gives the scheduled report creator the ability to manage permissions of the scheduled reports so others in the deployment can view and configure the report.

•	Nmm File Processing and Appliance Configuration Issues — Some units that are no longer managed by the GMS send syslog messages that create NMM files, impacting performance. In GMS 7.2 SP2, the user is notified when this occurs and the unit can be configured to stop sending syslog messages.

•	Firewall Login Enhancements — This feature allows the GMS administrator or equivalent to manage firewalls using a non-admin local or remote user account with sufficient privileges to manage, monitor, and report.

•	Retaining the Manual Address — This feature provides you with the ability of disabling Auto Switching and selecting Auto mode when adding a unit. This allows the administrator to manage an added unit before it is provisioned and starts sending heartbeat messages.

•

Application Level Data Archiving and Aging — In previous versions, logs and metadata tables were not deleted from the application table, causing the number of rows to grow quickly in the tables, affecting overall performance of the application. In GMS 7.2 SP2, the console logs and application metadata tables are archived and aged to fix this issue.

•	Localization — Support for the Korean language is included in GMS 7.2 SP2.

•	Disable Data Store — Added the option to disable storing of archived syslog messages.

•	Import LDAP User Groups — LDAP user groups can be imported on Dell SonicWALL appliances through GMS.

•	Reverse DNS Support — Hostname Resolution is used for source IPs with missing hostnames. Reports will show both the Initiator IP and the Initiator Hostname in the reports whenever applicable.

•	SonicOS Support — The following SonicOS enhancements are added:

•	NTP Server Support — Added options for adding and editing NTP Servers in the System > Time screen.

•	Rapid Spanning Tree Support — Added a new screen under Switching called Rapid Spanning Tree that offers options for version, bridge priority, hello time, and forward delay.

•	VLAN Trunk Switching — Added a new screen under Switching called VLAN Trunking with two read-only fields called Starting VLAN ID and Ending VLAN ID that are used to display reserved VLAN information.

•	Rate Control Switching — Added a new screen called Rate Control under the Switching screen group. The Rate Control table shows the name, ingress limit mode, ingress rate, egress rate, and flow control.

•	Layer 2 QoS Switching — Added a new screen called Layer 2 QoS in the Switching group. The DSCP Remap table shows 64 priority levels with default value of “normal”. The Reset control brings each priority to its default value.

•	Port Security Switching — Added a new screen called Port Security to the Switching group.

•	User Settings Enhancements — Added several new options in the Users > Settings page, available at unit and group level.

•	Anti-Spam Settings — Three new fields are added to the Anti-Spam > Settings page: Probe Timeout, Use Destination Mail Server Private Address as Junk Store Address, Junk Store IP Address.

•	Security Services Enhancements — Added several new options in the Geo-IP Filter, Botnet Filter, Inheritance Preview Dialog, Gateway Anti-Virus, Intrusion Prevention, and Anti-Spyware screens.

•	3G/4G/Modem > Connection Profile Enhancements — A new option called Force PAP Authentication is added to the 3G/4G/Modem > Connection Profiles page.

•	Wireless Enhancements — Several enhancements are added to the Settings, Security, and Virtual Access Point screens.

•	Administrative Enhancements — New options are added to the System > Administrator page.

•	CFS Enhancements — New fields are added to the Content Filter > Settings and Websense pages.

•	NTLM tab in Users > Settings — A new NTLM tab is added in the Single Sign-On Authentication Configuration window.

•	Per-Zone Enforcement Settings — New fields are added to the User > Settings > SSO Configuration > Enforcement tab.

•	Web Block Page Enhancements — Added a new Customize Web Block Page Settings section in the Security Services > Botnet Filter page.