Manuale d’uso / di manutenzione del prodotto ViewPoint del fabbricante SonicWALL
Vai alla pagina of 37
SonicW ALL V iewPoint User's Guide.
Page 1 CONTENTS Copyright Notice ........................................................................... 2 Software License Agreement ...................................................... 3 1 INTRODUCTION .........................................
Pag e 2 SonicWALL ViewPoint Copyright Notice © 2001 SonicWALL, Inc. All rights reserved. Under the copyright laws, this manual or the software de- scribed within, may not be copied, in whole or part, without the written consent of the manufacturer , except in the nor - mal use of the software to make a backup copy .
Page 3 Software License Agreement for ViewPoint This Software License Agreement (SLA) is a legal agreement between you and SonicWALL, Inc. (SonicWALL) for the SonicWALL software product identified above, which includes computer software and any and all associated media, printed materials, and online or electronic documentation (SOFTWARE PRODUCT).
Pag e 4 SonicWALL ViewPoint U.S. GOVERNMENT RESTRICTED RIGHTS If you are acquiring the Software including accompanying documentation on behalf of the U.
Page 5 1 INTRODUCTION Monitoring critical network events and activity , such as secu- rity threats, inappropriate Web use, and bandwidth levels, is an essential component of network security . SonicW ALL ViewPoint compliments SonicWALL's Internet security offer- ings by providing detailed and comprehensive reports of network activity .
Pag e 6 SonicWALL ViewPoint 2 GETTING ST AR TED SonicWALL ViewPoint is a software reporting solution that may be installed on any computer on the SonicWALL's LAN. The computer used to host the reporting software will be referred to as the “V iewPoint Server .
Page 7 3 REGISTERING VIEWPOINT The following instructions describe the procedure to register and activate the ViewPoint Upgrade for the SonicWALL PRO. Registering the ViewPoint Upgrade is not required for the SonicWALL PRO-VX or SonicWALL GX. From a W eb browser , go to the SonicWALL registration site at http://www .
Pag e 8 SonicWALL ViewPoint 3. In the "My SonicWALL Service Management" window , select the Activate button displayed next to the ViewPoint service. An "Activate Service" window will be displayed. 4. Enter the ViewPoint Activation Key displayed on the back of this manual in the Activation Key field.
Page 9 4 UPDA TING SONICW ALL FIRMWARE Y ou must upgrade the SonicWALL firmware to version 6.1.0.0 to support V iewPoint. Y ou may skip this section if you are using firmware version 6.1.0.0 or greater . 1. From a W eb browser , go to http://www .sonicwall.
P age 10 SonicWALL ViewPoint 4. Click the Upload Firmware Now button. 5. A Save Pr eferences window will appear . When firm- ware is updated, your SonicW ALL ’ s settings may be erased, so it is recommended to save the SonicW ALL ’ s preferences. If you have saved the SonicWALL ’ s prefer- ences file to your local disk, click Ye s .
Page 11 5 CONFIGURING THE SONICWALL Configure the SonicWALL to direct syslog to the V iewPoint Server . 1. Click the Log button on the left side of the browser window and then click the Log Settings tab at the top of the window . A window similar to the following will be displayed.
P age 12 SonicWALL ViewPoint 6 INST ALLING VIEWPOINT Installing the ViewPoint Software Y ou may install ViewPoint from the V iewPoint Upgrade CD or you may download the ViewPoint software file from the SonicWALL, Inc. Web site. The ViewPoint server must be running Windows 2000 or Win- dows NT SP 4 or greater and it must have a static IP address.
Page 13 The installation wizard will guide you through the set up and install ViewPoint reporting software and syslog server , T omcat Web Server , and MySQL Database.
P age 14 SonicWALL ViewPoint 7 MANAGING VIEWPOINT Logging Into the ViewPoint Web Interface Y ou will need to configure several settings in the ViewPoint Web Interface in order to view network reports.
Page 15 Configuring ViewPoint Settings ViewPoint requires that users successfully authenticate to ac- cess reports. This authentication mechanism prevents unknown users from viewing sensitive network data. The ViewPoint Con- figuration window allows you to modify the ViewPoint user name and password.
P age 16 SonicWALL ViewPoint 6. Click the Update button to update the configuration. Note: If you lose or forget the ViewPoint user name or pass- word, you will need to uninstall and then reinstall the ViewPoint software.
Page 17 2. Enter the LAN IP Address of your SonicWALL in the IP Address field. 3. Enter the SonicWALL serial number in the Serial Num- ber field. The 12 character , alphanumeric serial number is displayed on the General Status window of the SonicWALL Web Management Interface.
P age 18 SonicWALL ViewPoint Configuring Syslog Settings The Syslog Configuration window allows you to change the UDP port number that ViewPoint syslog server listens on, to configure ViewPoint to forward syslog data to other servers, and to limit the database size.
Page 19 5. Y ou may configure the maximum size of the ViewPoint datab ase. T o limit the database by number of days, se- l ec t the Maximum Number of Days in Database radio button and enter the number of days that syslog mes- sages should be saved in the corresponding field.
P age 20 SonicWALL ViewPoint Setting the ViewPoint Report Date Y ou may change the ViewPoint report date quickly and easily . 1. T o change the report date, click the Date option in the top right corner of the browser window . A window simi- lar to the following will appear .
Page 21 8 VIEWPOINT WEB INTERF ACE This section briefly describes the ViewPoint Web Interface and the Web-based help options. The ViewPoint Web Interface may be accessed from a Web browser from any computer located on the same network as the V iewPoint Server .
P age 22 SonicWALL ViewPoint ViewPoint Report Layout Most ViewPoint reports include a chart and a table. The chart displays information such as the amount of bandwidth through the SonicWALL over time. The table provides a summary of the data displayed in the chart.
Page 23 9 REPORT DESCRIPTIONS General Reports Status The General Status report displays comprehensive informa- tion about the current status of the SonicWALL.
P age 24 SonicWALL ViewPoint The Failed Login report table displays the time and the name or IP address of the machine that attempted to au- thenticate to the SonicWALL. VPN Events The VPN Events report lists all VPN events, including VPN SA negotiation attempts, VPN key exchanges, VPN heart- beat messages and VPN connection errors.
Page 25 that occurred during the hour , the number of MBytes trans- ferred, and the MBytes as a percentage of the total MBytes for the report day . Both the chart and the table include inbound and outbound traffic through the LAN, WAN, and DMZ interfaces.
P age 26 SonicWALL ViewPoint Service Monitor The Service Monitor report displays a real-time graph of network activity by a service over the past 5 minutes. The Service Monitor shows FTP , HTTP , ICMP , NetBIOS, DNS, NTP , SMTP , and other services in KBytes or MBytes transferred per second.
Page 27 T op Users of W eb The T op Users of Web report shows the most active users accessing Web sites on the Internet or on the LAN or DMZ network segments. This report displays the number of Web site hits and the amount of bandwidth transferred, identi- fying inappropriate or excessive Web usage.
P age 28 SonicWALL ViewPoint The Web Filter Summary report displays a bar graph of at- tempts to access objectionable Web sites by the number of blocked attempts.
Page 29 The T op Objectionable Web Sites By User report displays a table of the users blocked by the SonicWALL, the top 5 Web sites the users attempted to access, and the number of attempts to access each Web site.
P age 30 SonicWALL ViewPoint The Mail Usage Summary Report displays a bar graph of Mail traffic through the SonicWALL in KBytes transferred. The table displays the hour of the day , the number of Mail.
Page 31 The T op Sources of Attacks report displays a pie chart of the top 10 sources by the number of attacks. The report table lists the top 10 sources displayed in the chart, the number of attacks generated by the source, and the number of at- tacks as a percentage of the total attacks during the report period.
P age 32 SonicWALL ViewPoint 10 ACCESSING VIEWPOINT REMOTEL Y Because the ViewPoint Interface is Web browser-based, any user on the SonicWALL's LAN may login and look at ViewPoint network reports.
Page 33 APPENDIX Uninstalling ViewPoint Uninstall the ViewPoint program and all of its components from your system by relaunching the ViewPoint setup pro- gram. 1. If you installed ViewPoint from a CD, load the CD into your server and run the ViewPoint setup program.
P age 34 SonicWALL ViewPoint V iewPoint Administrative T ools The ViewPoint software includes several utilities to improve management and reliability .
Page 35 ViewPoint Software Components The ViewPoint software program consists of several differ- ent components. These components include: MySQL Database, T omcat Web server , a syslog server , and SonicWALL ViewPoint software files. MySQL Database MySQL is a relational database management system.
P age 36 SonicWALL ViewPoint NOTES.
Un punto importante, dopo l’acquisto del dispositivo (o anche prima di acquisto) è quello di leggere il manuale. Dobbiamo farlo per diversi motivi semplici:
Se non hai ancora comprato il SonicWALL ViewPoint è un buon momento per familiarizzare con i dati di base del prodotto. Prime consultare le pagine iniziali del manuale d’uso, che si trova al di sopra. Dovresti trovare lì i dati tecnici più importanti del SonicWALL ViewPoint - in questo modo è possibile verificare se l’apparecchio soddisfa le tue esigenze. Esplorando le pagine segenti del manuali d’uso SonicWALL ViewPoint imparerai tutte le caratteristiche del prodotto e le informazioni sul suo funzionamento. Le informazioni sul SonicWALL ViewPoint ti aiuteranno sicuramente a prendere una decisione relativa all’acquisto.
In una situazione in cui hai già il SonicWALL ViewPoint, ma non hai ancora letto il manuale d’uso, dovresti farlo per le ragioni sopra descritte. Saprai quindi se hai correttamente usato le funzioni disponibili, e se hai commesso errori che possono ridurre la durata di vita del SonicWALL ViewPoint.
Tuttavia, uno dei ruoli più importanti per l’utente svolti dal manuale d’uso è quello di aiutare a risolvere i problemi con il SonicWALL ViewPoint. Quasi sempre, ci troverai Troubleshooting, cioè i guasti più frequenti e malfunzionamenti del dispositivo SonicWALL ViewPoint insieme con le istruzioni su come risolverli. Anche se non si riesci a risolvere il problema, il manuale d’uso ti mostrerà il percorso di ulteriori procedimenti – il contatto con il centro servizio clienti o il servizio più vicino.