You are on page 1of 9

SonicWallAnalyzer8.

3
ReleaseNotes
March2017
ThesereleasenotesprovideinformationabouttheSonicWallAnalyzer8.3release.
Topics:
AboutSonicWallAnalyzer8.3
ResolvedIssues
KnownIssues
PlatformCompatibility
UpgradingtoAnalyzer8.3
ProductLicensing
SonicWallSupport

AboutSonicWallAnalyzer8.3
SonicWallAnalyzer8.3releaseprovidessupportfortheSonicOS6.2.7release,alongwithabrandingrefreshfor
SonicWall,aswellasperformanceimprovementsandbugfixesthataddressanumberofknownissuesfrom
previousreleases.SeetheResolvedIssuesandKnownIssuessections.

ResolvedIssues
Thefollowingisalistofissuesaddressedinthisrelease.

Configuration
Resolvedissue IssueID
Dataprivacysettingsarenotcorrectlyblockingtheusernames. 183929
Asyslogcheckerneedstobeaddedforrejectingsyslogswiththewrongdate. 176195

HeterogenousManagement
Resolvedissue IssueID
Thedrilldownfeatureisnotfunctioningcorrectlyforfailedloginreports. 179204
Occurswhentheusernamecontainsspecialcharacters.

SonicWallAnalyzer8.3 1
ReleaseNotes
Reportspanel
Resolvedissue IssueID
JapanesecharactersdonotdisplaycorrectlyonPDFreports. 180010
CustomersneedtheAccessRuleIDandfirewallactionincludedaspartoftheAnalyzerReport. 179207
TheShowCaptureATPDetailsoptionisnotfunctioningcorrectlyandreturnsa400Bad 175153
Requesterrormessage.
Them=16syslogappearsunderWebFilteringwith'ADBD','AB',ETC.asitscategories. 174067
Analyzer8.0doesnotreportanydetailsfortheSMASSLVPN. 163385

UniversalScheduler
Resolvedissue IssueID
UniversalScheduledReportsdonotappearindescendingorderforsecurityservices,butdo 179519
appearindescendingorderwhencreatingreportpanels.
TheTimetableheadingsinScheduleReports(suchasBrowseTime)areambiguous. 150132
CustomerswouldlikeaunitmeasurementaddedtotheScheduledReporttableheadings.

Vulnerabilities
Resolvedissue IssueID
Analyzersystemswithoutofdatekernels(fromyear2010)thathavereachedendoflifestatus 177899
arenotupgradable.
Optimizerfailsandcausescorruptionandeventualcrashofsummarizer. 176448

Summarizer
Resolvedissue IssueID
AnalyzerislookingtodevelopenhancementsthataddressOOMexceptionhandlingissues. 176196

KnownIssues
Analyzer8.3isnotsupportedforWindows10orWindows2016.
ThefollowingisalistofissuesknowntoexistatthetimeoftheAnalyzer8.3release.

Reportspanel
Knownissue IssueID
Forunsubscribedservices,reportspageshoulddisplay,Theapplianceisnotlicensedforthis 181690
service.Instead,Nomatchingrecordsfoundisdisplayed.
TheCaptureATP>StatuspageisnotloadingcorrectlyafterupgradingtotheAnalyzer8.2.1/SP1 181549
Take2build.
WebTrafficdataismissing. 178700
OccurswhencustomersuseWebProxiesontheirnetwork.
Analyzerautologsoutbeforetheconfiguredinactivitytimerindicates. 173459

SonicWallAnalyzer8.3 2
ReleaseNotes
System
Knownissue IssueID
Analyzertimelogsdonotrelatecorrectlytotheappropriatetimezones. 167143

Policiespanel
Knownissue IssueID
TheUpdatebuttondoesnotfunctioncorrectlyintheEditwindowofthePolicies>Logs> 183429
Categoriesscreen.
OccurswheneditingthemainLogCategories.

PlatformCompatibility
TheSonicWallAnalyzer8.3releasecanbehostedintwodeploymentscenariosasfollows:
MicrosoftWindowsServerSoftware
VMwareESXiVirtualAppliance
DeploymentConsiderations:
BeforeselectingaplatformtouseforyourAnalyzerdeployment,usetheCapacityCalculator2.This
helpsyousetupthecorrectAnalyzersystemforyourdeployment.
CAUTION:SonicWallrecommendsthatyoutakestepstominimizeabruptshutdownsoftheserver
hostingAnalyzer,asthiscancausecorruptionoftheReportingdatabase,potentiallyleadingtolossof
dataforthecurrentmonth.ApossiblesolutionincludesusinganUninterruptedPowerSupply(UPS).

BeforeinstallingAnalyzer8.3,ensurethatyoursystemmeetstheminimumhardwareandsoftware
requirementsdescribedinthefollowingsections:
Supportedplatforms
Unsupportedplatforms
Hardwarerequirements
HarddriveHDDspecifications
GMSvirtualappliancesupportedplatforms
Virtualappliancedeploymentrequirements
Browserrequirements
MicrosoftSQLserverrequirements
Javasupport
SonicWALLappliancessupportedforGMSmanagement

Supportedplatforms
TheSonicWallAnalyzersupportsthefollowingMicrosoftWindowsoperatingsystems:
WindowsServer2012Standard64bit
WindowsServer2012R2Standard64bit(EnglishandJapaneselanguageversions)
WindowsServer2012R2Datacenter

SonicWallAnalyzer8.3 3
ReleaseNotes
Windows8.164bit
Windows764bit
TheseWindowssystemscaneitherruninphysicalstandalonehardwareplatforms,orasavirtualmachineunder
WindowsServer2012HyperVorESXi.
TIP:Forbestperformanceandscalability,itisrecommendedtousea64bitWindowsoperatingsystem.
Bundleddatabasesrunin64bitmodeon64bitWindowsoperatingsystems.Alllistedoperatingsystems
aresupportedinbothvirtualizedandnonvirtualizedenvironments.InaHyperVvirtualizedenvironment,
WindowsServerisaguestoperatingsystemrunningonHyperV.Analyzeristheninstalledonthe
WindowsServervirtualmachinethatislayeredoverHyperV.

NOTE:AnalyzerisnotsupportedonMSWindowsServervirtualmachinesrunningincloudservices,such
asMicrosoftAzureandAmazonWebServicesEC2.

Hardwarerequirements
UsetheCapacityCalculator2todeterminethehardwarerequirementsforyourdeployment.
NOTE:AWindows64bitoperatingsystemwithatleast8GBofRAMishighlyrecommendedforbetter
performanceofreportingmodules.(Forevenbetterperformance,use16GBmemory.)

HarddriveHDDspecifications
ThefollowingharddriveHDDspecificationsarerequiredwhenusingAnalyzerSoftwareonaWindowsServeror
aAnalyzerVirtualAppliance:
Hardwarerequirements
Requirement Details
SpindleSpeed 7,200RPMorhigher
Cache 64MBorhigher
Transferrate 600MBsorhigher
Averagelatency 4microsecondsorlower

Analyzervirtualappliancesupportedplatforms
TheelementsofbasicVMwarestructuremustbeimplementedpriortodeployingtheSonicWallAnalyzer
VirtualAppliance.TheAnalyzerVirtualAppliancerunsonthefollowingVMwareplatforms:
ESXi6.0and5.5

Virtualappliancedeploymentrequirements
ConsiderthefollowingbeforedeployingtheAnalyzerVirtualAppliance:
AnalyzermanagementisnotsupportedonAppleMacOS.
Allmodulesare64bit.

Analyzervirtualappliancehardwareresource
requirements
UsetheCapacityCalculator2todeterminethehardwarerequirementsforyourdeployment.
SonicWallAnalyzer8.3 4
ReleaseNotes
TheperformanceofAnalyzerVirtualAppliancedependsontheunderlyinghardware.Itishighlyrecommended
todedicatealltheresourcesthatareallocatedtotheVirtualAppliance,especiallytheharddisk(datastore).In
environmentswithhighvolumesofsyslogsorAppFlow(IPFIX),youwillneedtodedicatelocaldatastorestothe
AnalyzerVirtualAppliance.
TheVirtualAppliancesare64bit,whichtakeadvantageofadditionalRAMavailabletoit.Aminimumof4GB
RAMisrequired.However,atleast8GBofRAMishighlyrecommendedforbetterperformanceofreporting
modules.

Browserrequirements
SonicWallAnalyzerusesadvancedbrowsertechnologiessuchasHTML5,whicharesupportedinmostrecent
browsers.SonicWallrecommendsusingthelatestChrome,Firefox,InternetExplorer,orSafaribrowsersfor
administrationoftheSonicWallAnalyzer.
ThisreleasesupportsthefollowingWebbrowsers:
Chrome42.0orhigher(recommendedbrowserfordashboardrealtimegraphicsdisplay)
Firefox37.0orhigher
InternetExplorer11.0orhigher(donotusecompatibilitymode)
NOTE:InternetExplorerversion10.0inMetrointerfacesofWindows8isnotcurrentlysupported.

NOTE:TurnoffCompatibilityModewhenaccessingtheAnalyzermanagementinterfacewithInternet
Explorer.Formoreinformation,seetheKnowledgeBasearticlelocatedat:
https://support.sonicwall.com/sonicwallgms/kb/sw14003

MobiledevicebrowsersarenotrecommendedforSonicWallAnalyzersystemadministration.
NOTE:IfusingChromeversion42andnewertoaccessAnalyzer7.2andolder,youwillneedtoenable
NPAPIsupportinChrome,whichbydefaulthasbeendisabledstartingwithversion42.

Javasupport
NOTE:JavaisrequiredonlywhenyouareusingNetMonitor,orifyouwanttousetheLogintoUnit
rightclickmenuofTreeControl.

DownloadandinstallthelatestversionoftheJava8pluginonanysystemthataccessestheAnalyzer
managementinterface.Thiscanbedownloadedfrom:
www.java.com
or
http://www.oracle.com/technetwork/java/javase/downloads/index.html

SonicWallAnalyzer8.3 5
ReleaseNotes
SonicWallappliancessupportedforAnalyzer
management
SonicWallAnalyzer8.3supportsthefollowingSonicWallappliancesandfirmwareversions:
Componentrequirements
SonicWallplatforms SonicWallfirmwareversion
Networksecurityappliance
SuperMassive10000Series SonicOS6.0ornewer
NOTE:Onlypartialpolicymanagementandreportingsupportiscurrently
available.ContactyourSonicWallSalesrepresentativethrough
https://support.sonicwall.com/formoreinformation.
SuperMassive9000Series SonicOS6.1ornewer
NSASeries SonicOS5.0ornewer
TZSeriesandTZWireless SonicOS5.0ornewer
SonicWallSOHOandSOHO SonicOS6.2.6ornewer
Wireless
EmailSecurity/AntiSpam
EmailSecuritySeries EmailSecurity7.2ornewer(managementonly)
SecureMobileAccess
SMA6200/7200 SMA10.7.2ornewer
SRA/SSLVPNSeries SSLVPN2.0ornewer(management)
SSLVPN2.1ornewer(managementandreporting)
EClassSRASeries EClassSRA9.0ornewer
Notes:
AppliancesrunningfirmwarenewerthanthisAnalyzerreleasecanstillgeneratereports.However,the
newfeaturesinthefirmwarereleasewillbesupportedinanupcomingreleaseofAnalyzer.
LegacySonicWallXPRS/XPRS2,SonicWallSOHO2,SonicWallTele2,andSonicWallPro/ProVXmodels
arenotsupportedforSonicWallAnalyzerreporting.AppliancesrunningSonicWalllegacyfirmware
includingSonicOSStandard1.xandSonicWalllegacyfirmware6.x.x.xarenotsupportedforSonicWall
Analyzerreporting.
SonicWallAnalyzercanbeconnectedtoSSLVPN2000and4000appliances.UsetheLog>ViewPoint
pagetosetuptheAnalyzerconnection(inadditiontotheconfigurationchangesmadeonthe
Analyzer).InSonicWallSRASSLVPN5.5orlaterfirmwareversions,aLog>Analyzerpageisprovidedfor
configurationofAnalyzersettings.

UpgradingtoAnalyzer8.3
ThissectionprovidesproceduresforupgradinganexistingSonicWallAnalyzer8.2ornewerinstallationto
Analyzer8.3.
SeetheassociatedKnowledgeBasearticles#213012and#213411athttps://support.sonicwall.com/sonicwall
gms/kbformoreinformation.
Analyzercanbeconfiguredforasingleserverorinadistributedenvironmentonmultipleservers.Analyzer8.3
canbeinstalledasafreshinstallorasanupgradefromAnalyzer8.2.Ifyouwishtoperformafreshinstallof
Analyzer8.3,refertotheAnalyzerGettingStartedGuidethatrelatestoyourAnalyzerdeployment.
ConsiderthefollowingbeforeupgradingtoAnalyzer8.3:

SonicWallAnalyzer8.3 6
ReleaseNotes
The40GBAnalyzerVirtualApplianceshouldbeinstalledinnonproductionenvironmentsonly.Examples
ofnonproductionenvironmentsincludethoseforProofofConcept(POC),pilot,anddemo
deployments.Onlythe250GBand950GBvirtualappliancesaresupportedinproductionenvironments.
Itisnotpossibletoupgradea40GBvirtualappliancetoa250GBor950GBvirtualappliance.Youneedto
downloadthe250GBor950GBvirtualapplianceifyouareplanningtousethissoftwarenoworinthe
futureforaproductionenvironment.
Innonproductionenvironments,theamountofsyslogdatacollectedbythevirtualappliancemay
exceedthe40GBlimit,inwhichcaseSonicWallwillbeunabletosupportthe40GBvirtualappliance.
YoumustdisabletheUserAccountControl(UAC)featureonWindowsbeforerunningtheGMSinstaller.
Inaddition,disableWindowsFirewalloryourpersonalfirewallbeforerunningthisinstaller.
ForappliancesundermanagementusingaAnalyzerManagementTunnelorExistingTunnel,makesure
thatHTTPSmanagementisallowedfromtheAnalyzerservers.ThisisbecauseAnalyzer8.3logsintothe
appliancesusingHTTPSonly.
ThescheduledreportscreatedinAnalyzer8.0continuetoworkproperlyafterupgradingto8.3.However,
theLegacyreportscreatedinAnalyzer6.0orearlierversionsarenotmigrated.Formoreinformationon
viewinglegacyreports,refertotheAnalyzerAdministrationGuide.
WhenperformingafreshinstallationofAnalyzeronWindows,theinstallerpromptsforanIPv6address
oftheserverifitdetectsanIPv6network.
Inadistributedenvironment,shutdownallAnalyzerserversexcepttheonethatisrunningthedatabase.
AnalyzerserverswiththeSonicWallUniversalManagementSuiteDatabaseserviceshouldbeupgradedfirst,
andthenyoucanupgradetheotherservers.YoumustupgradeallAnalyzerserversinyourdeploymenttothe
sameversionofAnalyzer.Youcannothavesomeserversrunningversion8.3andothersrunning8.2.
NOTE:DONOTstart/stoptheSonicWallUniversalManagementSuiteDatabaseservicemanually,before
orafterupgradingto8.3.Aftertheupgrade,theSonicWallUniversalManagementSuiteDatabase
servicewillbedownuntiltheMySQLupgradeprocesshascompletedaswell.Logintothe/applianceUIto
tracktheprogress.

Upgradingprocedure
ToupgradetoAnalyzer8.3,completethefollowingsteps:
1 Navigatetowww.mysonicwall.com.
2 DownloadtheAnalyzer8.3software.
3 Afterthefileshavedownloaded,doubleclickthefirstfileandfollowtheonscreeninstructions.The
InstallerdetectsanypreviousinstallationsofAnalyzer.ClickInstalltoproceedwiththeinstallation.
4 IfyouseeaWindowsSecurityAlertforJava,clickUnblock.Theinstallerdisplaysaprogressbarasthe
filesareinstalled.Waitafewminutesfortheinstallertofinishinstalling.
5 Afterthefilesareinstalled,whetherornotthesystemhasaPersonalFirewallsuchasWindowsFirewall
enabled,adialogisdisplayednotifyingyoutoeitherdisablethefirewallormanuallyopenthesyslogand
SNMPports,andtoensurethattheseportsareopenonyournetworkgatewayorfirewallifyouplanto
useHTTPSManagementmodeformanagingremoteappliances(insteadofAnalyzerManagement
TunnelorExistingTunnelmodes).ClickOK.Besuretoadjustthesettingsasrecommended.
6 Aftertheinstallerhascompleted,rebootthesystemtocompletetheinstallation.

UpgradingtheGMSvirtualappliance
ThissectionprovidesproceduresforupgradinganexistingSonicWallAnalyzer8.2virtualapplianceornewer
installationtoAnalyzer8.3virtualappliance.

SonicWallAnalyzer8.3 7
ReleaseNotes
SeetheassociatedKnowledgeBasearticles#213012and#213411athttps://support.sonicwall.com/sonicwall
gms/kbformoreinformation.
Inadistributedenvironment,shutdownallAnalyzerserversexcepttheonethatisrunningthedatabase.
AnalyzerserverswiththeSonicWallUniversalManagementSuiteDatabaseserviceshouldbeupgradedfirst,
andthenyoucanupgradetheotherservers.YoumustupgradeallAnalyzerserversinyourdeploymenttothe
sameversionofAnalyzer.Youcannothavesomeserversrunningversion8.3andothersrunning8.2.
NOTE:DONOTstart/stoptheSonicWallUniversalManagementSuiteDatabaseservicemanually,beforeor
afterupgradingto8.3.Aftertheupgrade,theSonicWallUniversalManagementSuiteDatabaseservicewillbe
downuntiltheMySQLupgradeprocesshascompletedaswell.Logintothe/applianceUItotracktheprogress.
ForafreshinstalloftheAnalyzer8.364bitVirtualAppliance,refertotheAnalyzerVirtualApplianceGetting
StartedGuide.

Toupgrade,completethefollowing:
1 DownloadtheAnalyzer8.3filefromwww.mysonicwall.comtoyourworkstationsoftware:
sw_gmsvp_vm_eng_8.3.xxxx.yyyy.gmsvpupdater.64bit.sh
2 Logintothe/appliance(System)interfaceoftheAnalyzerserver.
3 NavigatetotheSystem>Settingspage.
4 ClickBrowse,navigatetothelocationwhereyousavedtheabovefiles,andselectthefirstnecessaryfile.
5 ClickApplytobeginthefirmwareupgradeinstallation.
6 TheVirtualAppliancerebootsattheendoftheinstallationprocess.

ProductLicensing
SonicWallnetworksecurityappliancesmustberegisteredonMySonicWalltoenablefullfunctionalityandthe
benefitsofSonicWallsecurityservices,firmwareupdates,andtechnicalsupport.Loginorregisterfora
MySonicWallaccountathttps://mysonicwall.com.

SonicWallSupport
TechnicalsupportisavailabletocustomerswhohavepurchasedSonicWallproductswithavalidsupport
maintenancecontractandtocustomerswhohavetrialversions.
TheSupportPortalprovidesselfhelptoolsyoucanusetosolveproblemsquicklyandindependently,24hoursa
day,365daysayear.ToaccesstheSupportPortal,gotohttps://support.sonicwall.com.
TheSupportPortalenablesyouto:
Viewknowledgebasearticlesandtechnicaldocumentation
Downloadsoftware
Viewvideotutorials
Collaboratewithpeersandexpertsinuserforums
Getlicensingassistance
AccessMySonicWall
LearnaboutSonicWallprofessionalservices
Registerfortrainingandcertification
TocontactSonicWallSupport,visithttps://support.sonicwall.com/contactsupport.

SonicWallAnalyzer8.3 8
ReleaseNotes
Copyright2017SonicWallInc.Allrightsreserved.
ThisproductisprotectedbyU.S.andinternationalcopyrightandintellectualpropertylaws.SonicWallisatrademarkor
registeredtrademarkofSonicWallInc.and/oritsaffiliatesintheU.S.A.and/orothercountries.Allothertrademarksand
registeredtrademarksarepropertyoftheirrespectiveowners.
TheinformationinthisdocumentisprovidedinconnectionwithSonicWallInc.and/oritsaffiliates'products.Nolicense,
expressorimplied,byestoppelorotherwise,toanyintellectualpropertyrightisgrantedbythisdocumentorinconnection
withthesaleofSonicWallproducts.EXCEPTASSETFORTHINTHETERMSANDCONDITIONSASSPECIFIEDINTHELICENSE
AGREEMENTFORTHISPRODUCT,SONICWALLAND/ORITSAFFILIATESASSUMENOLIABILITYWHATSOEVERANDDISCLAIMS
ANYEXPRESS,IMPLIEDORSTATUTORYWARRANTYRELATINGTOITSPRODUCTSINCLUDING,BUTNOTLIMITEDTO,THE
IMPLIEDWARRANTYOFMERCHANTABILITY,FITNESSFORAPARTICULARPURPOSE,ORNONINFRINGEMENT.INNOEVENT
SHALLSONICWALLAND/ORITSAFFILIATESBELIABLEFORANYDIRECT,INDIRECT,CONSEQUENTIAL,PUNITIVE,SPECIALOR
INCIDENTALDAMAGES(INCLUDING,WITHOUTLIMITATION,DAMAGESFORLOSSOFPROFITS,BUSINESSINTERRUPTIONOR
LOSSOFINFORMATION)ARISINGOUTOFTHEUSEORINABILITYTOUSETHISDOCUMENT,EVENIFSONICWALLAND/ORITS
AFFILIATESHAVEBEENADVISEDOFTHEPOSSIBILITYOFSUCHDAMAGES.SonicWalland/oritsaffiliatesmakeno
representationsorwarrantieswithrespecttotheaccuracyorcompletenessofthecontentsofthisdocumentandreservethe
righttomakechangestospecificationsandproductdescriptionsatanytimewithoutnotice.SonicWallInc.and/oritsaffiliates
donotmakeanycommitmenttoupdatetheinformationcontainedinthisdocument.
Formoreinformation,visithttps://www.sonicwall.com/legal/.

Legend
WARNING:AWARNINGiconindicatesapotentialforpropertydamage,personalinjury,ordeath.

CAUTION:ACAUTIONiconindicatespotentialdamagetohardwareorlossofdataifinstructionsarenotfollowed.

IMPORTANTNOTE,NOTE,TIP,MOBILE,orVIDEO:Aninformationiconindicatessupportinginformation.

Lastupdated:3/31/17
23200384700RevA

SonicWallAnalyzer8.3 9
ReleaseNotes