Summary of the content on the page No. 1
SonicWALL ViewPoint
User's Guide
Summary of the content on the page No. 2
CONTENTS Copyright Notice ........................................................................... 2 Software License Agreement...................................................... 3 1 INTRODUCTION ............................................................................ 5 2 GETTING STARTED ........................................................................ 6 System Requirements ..................................................................6 Network Configuration for ViewPoi
Summary of the content on the page No. 3
Copyright Notice © 2001 SonicWALL, Inc. All rights reserved. Under the copyright laws, this manual or the software de- scribed within, may not be copied, in whole or part, without the written consent of the manufacturer, except in the nor- mal use of the software to make a backup copy. The same proprietary and copyright notices must be affixed to any per- mitted copies as were affixed to the original. This exception does not allow copies to be made for others, whether or not sold, but all of th
Summary of the content on the page No. 4
Summary of the content on the page No. 5
U.S. GOVERNMENT RESTRICTED RIGHTS If you are acquiring the Software including accompanying documentation on behalf of the U.S. Government, the following provisions apply. If the Software is supplied to the Department of Defense (“DoD”), the Software is subject to “Restricted Rights”, as that term is defined in the DOD Supplement to the Federal Acquisition Regulations (“DFAR”) in paragraph 252.227 7013(c) (1). If the Software is supplied to any unit or agency of the United States Government oth
Summary of the content on the page No. 6
1 INTRODUCTION Monitoring critical network events and activity, such as secu- rity threats, inappropriate Web use, and bandwidth levels, is an essential component of network security. SonicWALL ViewPoint compliments SonicWALL's Internet security offer- ings by providing detailed and comprehensive reports of network activity. SonicWALL ViewPoint is a software application that creates dynamic, Web-based network reports. SonicWALL ViewPoint generates both real-time and historical reports to offer
Summary of the content on the page No. 7
2 GETTING STARTED SonicWALL ViewPoint is a software reporting solution that may be installed on any computer on the SonicWALL's LAN. The computer used to host the reporting software will be referred to as the “ViewPoint Server.” System Requirements The following is a list of the minimum requirements for the ViewPoint Server: Microsoft Windows 2000 or NT 4.0 Service Pack 4 or greater 500 MHz Processor 512 MB available disk space 256 MB memory Internet Explorer 4.0 or later or Netscape
Summary of the content on the page No. 8
3 REGISTERING VIEWPOINT The following instructions describe the procedure to register and activate the ViewPoint Upgrade for the SonicWALL PRO. Registering the ViewPoint Upgrade is not required for the SonicWALL PRO-VX or SonicWALL GX. From a Web browser, go to the SonicWALL registration site at http://www.mysonicwall.com and enter your User Name and Password to login. If you do not have a mysonicwall.com user account, you will need to create one. To register your SonicWALL Internet security ap
Summary of the content on the page No. 9
3. In the "My SonicWALL Service Management" window, select the Activate button displayed next to the ViewPoint service. An "Activate Service" window will be displayed. 4. Enter the ViewPoint Activation Key displayed on the back of this manual in the Activation Key field. 5. Click the Submit button. Once the Activation Key has been registered, a ViewPoint Li- cense Key will be displayed. Record this activation key carefully or copy the License Key to your Windows Clipboard. 1. Log into SonicWALL
Summary of the content on the page No. 10
4 UPDATING SONICWALL FIRMWARE You must upgrade the SonicWALL firmware to version 6.1.0.0 to support ViewPoint. You may skip this section if you are using firmware version 6.1.0.0 or greater. 1. From a Web browser, go to http://www.sonicwall.com and navigate to the Download Center to download the latest version of SonicWALL firmware to your local disk. 2. Login to your SonicWALL Internet security appliance. 3. Click the Tools button on the left side of the browser window and then click the Firm
Summary of the content on the page No. 11
4. Click the Upload Firmware Now button. 5. A Save Preferences window will appear. When firm- ware is updated, your SonicWALL’s settings may be erased, so it is recommended to save the SonicWALL’s preferences. If you have saved the SonicWALL’s prefer- ences file to your local disk, click Yes. 6. Click the Browse button and select the SonicWALL firmware file from your computer’s local disk. 7. Click the Upload button to upload the firmware file. 8. Restart the SonicWALL for the change to take eff
Summary of the content on the page No. 12
5 CONFIGURING THE SONICWALL Configure the SonicWALL to direct syslog to the ViewPoint Server. 1. Click the Log button on the left side of the browser window and then click the Log Settings tab at the top of the window. A window similar to the following will be displayed. 2. Enter the IP address or domain name of the ViewPoint Server in the Syslog Server field. Note: The ViewPoint Server must have a static IP address. Confirm that the server has a permanent IP address in the server’s TCP/IP Prop
Summary of the content on the page No. 13
6 INSTALLING VIEWPOINT Installing the ViewPoint Software You may install ViewPoint from the ViewPoint Upgrade CD or you may download the ViewPoint software file from the SonicWALL, Inc. Web site. The ViewPoint server must be running Windows 2000 or Win- dows NT SP 4 or greater and it must have a static IP address. Note: The Windows DNS configuration must be properly con- figured, or domain and host names will not be displayed in the ViewPoint reports. Before you attempt the installation, confir
Summary of the content on the page No. 14
The installation wizard will guide you through the set up and install ViewPoint reporting software and syslog server, Tomcat Web Server, and MySQL Database. Please refer to the Appendix for more information about these software components. The ViewPoint setup program will detect whether the de- fault Web, syslog or MySQL ports are in use. If the default Web port is active, the setup program will automatically recommend an alternative Web port, port 8080. If either syslog port 514 or MySQL port 3
Summary of the content on the page No. 15
7 MANAGING VIEWPOINT Logging Into the ViewPoint Web Interface You will need to configure several settings in the ViewPoint Web Interface in order to view network reports. From a Web browser, type http://LocalHost or http:// into the Location or Address field or launch ViewPoint from the SonicWALL folder in the Win- dows Start menu. An authentication window similar to the following will be displayed. Note: If you configured the ViewPoint Web server to use a different
Summary of the content on the page No. 16
Configuring ViewPoint Settings ViewPoint requires that users successfully authenticate to ac- cess reports. This authentication mechanism prevents unknown users from viewing sensitive network data. The ViewPoint Con- figuration window allows you to modify the ViewPoint user name and password. 1. From the ViewPoint Web Interface, expand the Con- figure option on the left side of the browser window and then click ViewPoint. A window similar to the following will be displayed. 2. To change the View
Summary of the content on the page No. 17
6. Click the Update button to update the configuration. Note: If you lose or forget the ViewPoint user name or pass- word, you will need to uninstall and then reinstall the ViewPoint software. Configuring SonicWALL Settings ViewPoint transparently authenticates to your SonicWALL Internet security appliance for status and state information. ViewPoint uses the SonicWALL administrator password and IP address configured during ViewPoint installation to au- thenticate. If the SonicWALL IP address or
Summary of the content on the page No. 18
2. Enter the LAN IP Address of your SonicWALL in the IP Address field. 3. Enter the SonicWALL serial number in the Serial Num- ber field. The 12 character, alphanumeric serial number is displayed on the General Status window of the SonicWALL Web Management Interface. Note: The Serial Number field is not case sensitive. 4. Enter the current SonicWALL administrator password in the Old Password field. 5. Enter the new SonicWALL administrator password in the New Password and Confirm New Password fie
Summary of the content on the page No. 19
Configuring Syslog Settings The Syslog Configuration window allows you to change the UDP port number that ViewPoint syslog server listens on, to configure ViewPoint to forward syslog data to other servers, and to limit the database size. 1. From the ViewPoint Web Interface, expand the Config- ure option on the left side of the browser window and then click Syslog. A window similar to the following will be displayed. 2. To change the UDP port number that the ViewPoint syslog server listens on, e
Summary of the content on the page No. 20
5. You may configure the maximum size of the ViewPoint database. To limit the database by number of days, se- lect the Maximum Number of Days in Database radio button and enter the number of days that syslog mes- sages should be saved in the corresponding field. To limit the database by size, select the Maximum Da- tabase Size in Megabytes radio button and enter the number of megabytes of memory that the data- base will store in the corresponding field. Note: By default, Viewpoint will save data