What’s New in WatchGuard Dimension v1.2 WatchGuard Training.

27
What’s New in What’s New in WatchGuard Dimension v1.2 WatchGuard Dimension v1.2 WatchGuard Training

Transcript of What’s New in WatchGuard Dimension v1.2 WatchGuard Training.

Page 1: What’s New in WatchGuard Dimension v1.2 WatchGuard Training.

What’s New in What’s New in WatchGuard Dimension v1.2WatchGuard Dimension v1.2

WatchGuard Training

Page 2: What’s New in WatchGuard Dimension v1.2 WatchGuard Training.

What’s New in Dimension v1.2What’s New in Dimension v1.2

Expanded detail on Devices pages• Device model for FireCluster members

• XTM OS build number with OS version number Log Search AND operator IP Mapping extended to additional reports Dashboards• Blocked APT Malware in the Security Dashboard

• Full screen mode for FireWatch Report Enhancements• New Proxy Traffic pivot reports

• Gateway AV and IPS detail reports include the signature name

• Local time zone used for exported CSV and PDF reports

• Support for Advanced Persistent Threat (APT Blocker) reports

• New VPN Bandwidth by Rate pivot report

WatchGuard Training 22

Page 3: What’s New in WatchGuard Dimension v1.2 WatchGuard Training.

What’s New in Dimension v1.2What’s New in Dimension v1.2

Administrative Task Enhancements• Diagnostics Task History for the Dimension Server

• Send feedback to WatchGuard

• Localized Dimension UI

WatchGuard Training 33

Page 4: What’s New in WatchGuard Dimension v1.2 WatchGuard Training.

Devices Page EnhancementsDevices Page Enhancements

WatchGuard Training 44

Page 5: What’s New in WatchGuard Dimension v1.2 WatchGuard Training.

Devices Page — OS Build Number & FireCluster Devices Page — OS Build Number & FireCluster ModelModel The Devices page now includes:• The build number with the Fireware XTM OS version number for each

device.

• The WatchGuard device model for each FireCluster member.

WatchGuard Training 55

Page 6: What’s New in WatchGuard Dimension v1.2 WatchGuard Training.

Log Search EnhancementsLog Search Enhancements

WatchGuard Training 66

Page 7: What’s New in WatchGuard Dimension v1.2 WatchGuard Training.

Log Search Query EnhancementLog Search Query Enhancement

When you search Dimension log messages, you can now include AND operators in query blocks.

You can add up to nine search query blocks to your search, with a maximum of four AND operators per block.

WatchGuard Training 77

Page 8: What’s New in WatchGuard Dimension v1.2 WatchGuard Training.

IP Address Mapping EnhancementsIP Address Mapping Enhancements

WatchGuard Training 88

Page 9: What’s New in WatchGuard Dimension v1.2 WatchGuard Training.

IP Mapping — Additional ReportsIP Mapping — Additional Reports

IP Mapping now applies to these additional reports in Dimension:• Dashboards

Executive Dashboard > Top Destinations Security Dashboard > Blocked Destinations FireWatch > Destination Tab

• Traffic Packet Filters

– Host Summary by Source ('Host')– Host Summary by Destination ('Host')– Session Summary ('Source', 'Destination)

Proxies– Source by Hits ('Host')– Source by Bandwidth ('Host')– Destination by Hits ('Host')– Destination by Bandwidth ('Host')– Session by Hits ('Host') (should really be Source, Destination)– Session by Bandwidth ('Host') (should really be Source, Destination)

WatchGuard Training 99

Page 10: What’s New in WatchGuard Dimension v1.2 WatchGuard Training.

IP Mapping — Additional ReportsIP Mapping — Additional Reports

• Services Intrusion Prevention Service > Source IP

• Device Audit Trail by IP address Denied Packets by Client

Authentication– Allowed by Location– Denied by Location

• Detail Alarms Detail by Source and by Destination Denied Packets

– Denied Packets Detail by Source or by Destination– Denied Packets by Client Detail

Intrusion Prevention Service by Source or by Destination

WatchGuard Training 1010

Page 11: What’s New in WatchGuard Dimension v1.2 WatchGuard Training.

Dashboard Report EnhancementsDashboard Report Enhancements

WatchGuard Training 1111

Page 12: What’s New in WatchGuard Dimension v1.2 WatchGuard Training.

Security DashboardSecurity Dashboard

WatchGuard Training 1212

The Security Dashboard includes the new Blocked APT Malware widget

The widget includes information about all the malware blocked by APT Blocker

Page 13: What’s New in WatchGuard Dimension v1.2 WatchGuard Training.

FireWatch Full Screen ModeFireWatch Full Screen Mode

You can now improve your view of FireWatch with Full Screen mode.

Full Screen mode is available in the latest versions of most web browsers that support HTML5. • You cannot use Full Screen mode in versions of Internet Explorer before

v11.

• The Full Screen button is hidden for web browsers that do not support HTML5.

WatchGuard Training 1313

Page 14: What’s New in WatchGuard Dimension v1.2 WatchGuard Training.

FireWatch Full Screen ModeFireWatch Full Screen Mode

To start Full Screen mode, at the top of the FireWatch page, click .

WatchGuard Training 1414

Page 15: What’s New in WatchGuard Dimension v1.2 WatchGuard Training.

FireWatch Full Screen ModeFireWatch Full Screen Mode

Select which groups to include in the Full Screen mode display.

WatchGuard Training 1515

Page 16: What’s New in WatchGuard Dimension v1.2 WatchGuard Training.

FireWatch Full Screen ModeFireWatch Full Screen Mode

Set the refresh interval.

WatchGuard Training 1616

Page 17: What’s New in WatchGuard Dimension v1.2 WatchGuard Training.

Report EnhancementsReport Enhancements

WatchGuard Training 1717

Page 18: What’s New in WatchGuard Dimension v1.2 WatchGuard Training.

New Pivot ReportsNew Pivot Reports

Proxy Traffic reports now include two new pivot reports to replace two pivot reports available in previous Dimension releases: • Protocol by Hits replaces the Source by Hits Summary pivot.

• Protocol by Bandwidth replaces the Source by Bandwidth Summary pivot.

VPN Bandwidth by Rate• The VPN Bandwidth report now includes a pivot report to see the data

by rate.

WatchGuard Training 1818

Page 19: What’s New in WatchGuard Dimension v1.2 WatchGuard Training.

Subscription Service Report EnhancementsSubscription Service Report Enhancements

Gateway AntiVirus and Intrusion Prevention Service• The Detail reports for Gateway AV and IPS now include the signature

name in the report data. Advanced Persistent Threat • Dimension now includes APT Blocker data in these reports:

Executive Summary PDF Security Dashboard APT Summary Detail Services PCI Compliance

WatchGuard Training 1919

Page 20: What’s New in WatchGuard Dimension v1.2 WatchGuard Training.

Time Zone for Report ExportTime Zone for Report Export

The local time zone is used for exported CSV and PDF reports.• When you export a report as a CSV or PDF file, the time zone that

appears in the file is the local time on the client computer.

• Previous releases used UTC time zone for CSV and PDF reports.

WatchGuard Training 2020

Page 21: What’s New in WatchGuard Dimension v1.2 WatchGuard Training.

Administrative Task EnhancementsAdministrative Task Enhancements

WatchGuard Training 2121

Page 22: What’s New in WatchGuard Dimension v1.2 WatchGuard Training.

Diagnostic Task HistoryDiagnostic Task History

See the Diagnostics Task History for the Dimension Server • Select Administration > System Settings > Diagnostics >

Dimension Server.

• The Task History section includes all system tasks run by your Dimension Server in the last 30 days.

WatchGuard Training 2222

Page 23: What’s New in WatchGuard Dimension v1.2 WatchGuard Training.

Send Feedback to WatchGuardSend Feedback to WatchGuard

The feedback that Dimension sends to WatchGuard helps WatchGuard to improve products and features. • Includes information about how Dimension is used and issues

encountered with Dimension.

• Does not include any information about the company or any company data that is sent through Dimension.

• Feedback data is anonymous and encrypted.

WatchGuard Training 2323

Page 24: What’s New in WatchGuard Dimension v1.2 WatchGuard Training.

Send Feedback to WatchGuardSend Feedback to WatchGuard

Enable Dimension to send feedback to WatchGuard:• In the Dimension Setup Wizard

• In the Administration > System Settings > Configuration page settings.

WatchGuard Training 2424

Page 25: What’s New in WatchGuard Dimension v1.2 WatchGuard Training.

Send Feedback to WatchGuardSend Feedback to WatchGuard

Review the Dimension feedback setting in the Administration > System Settings > Status > System Information section.

WatchGuard Training 2525

Page 26: What’s New in WatchGuard Dimension v1.2 WatchGuard Training.

Dimension UI LocalizedDimension UI Localized

You can now select to view the Dimension user interface in any of these languages:• French

• Spanish (Latin America)

• Japanese

• Korean

• Traditional Chinese

• Simplified Chinese Click the language drop-down list, and select a language. Explanatory text included in the Executive Summary and

Compliance reports that you view in Dimension is also localized.• PDF reports that are generated from your web browser view include the

localized text.

• PDF reports that are generated from a report schedule do not include localized text.

WatchGuard Training 2626

Page 27: What’s New in WatchGuard Dimension v1.2 WatchGuard Training.

Thank You!Thank You!

WatchGuard Training 2727