What

1
Whats New in WatchGuard Dimension v1.1
2
Whats New in Dimension v1.1

• Hyper-V Support
• Upgrade to Dimension v1.1
• Log Server Database
• Status Report 77253
• Back up and restore the Log Server database at an
  external location 76550
• External PostgreSQL server support 76223
• Log Server Management
• IP address mapping for devices with static or
  dynamic IP addresses 77934
• Support for SMTP gateways that require STARTTLS
  77091
• Reporting
• New detail reports for Gateway AntiVirus and
  Intrusion Prevention Service 77106 and 76656
• Publish scheduled reports to an external
  directory 75587 and 75908

3
Hyper-V Support
4
Hyper-V Support

• You can now deploy Dimension with Hyper-V for
  Microsoft Windows Server 2008 R2, 2012, or 2012
  R2
• Download the Dimension VHD file and use Microsoft
  Server Hyper-V Manager, or another Hyper-V
  environment, to install the Dimension VM.
• Complete installation instructions are included
  in the Dimension Release Notes and Dimension
  Help. To summarize
• Deploy and start the Dimension VM.
• Add an IDE hard disk to the Dimension VM.
• Run the WatchGuard Dimension Setup Wizard to
  configure Dimension.

5
Upgrade to Dimension v1.1
6
Upgrade to Dimension v1.1

• The procedure to upgrade Dimension from v1.0 to
  v1.1 is a two-step process
• Upgrade Dimension with the v1.1 upgrade
  preparation file.This updates the Dimension
  Upgrade feature.
• Upgrade Dimension with the v1.1 upgrade
  file.This file contains the v1.1 feature
  upgrades for Dimension.

7
Upgrade to Dimension v1.1

• To upgrade Dimension
• Connect to Dimension at https//ltIP address of
  Dimensiongt and log in.
• Select Manage System gt System Settings.
• Click Upgrade and select the first upgrade file
• watchguard-dimension_1_1_amd64.deb
• Wait for the upgrade to complete and Dimension to
  reboot.Do not reboot the Dimension VM before the
  upgrade is complete.
• Log in again.
• Select Administration gt System Settings.
• Click Upgrade and select the second upgrade file
  
• watchguard-dimension_1_1_apt.tgz
• Wait for the upgrade to complete. If the upgrade
  requires the Dimension services to restart,
  Dimension will reboot.
• Select Administration gt System Settings and
  verify the version number is correct.

8
Log Server Database
9
Status Report

• The Status Report for the Dimension database is
  available on the Administration gt Database page.
• The Status Report includes statistics for the Log
  Server database, and log message and report
  statistics for the devices that are connected to
  Dimension.

10
External Backup and Restore

• You can configure an SFTP server as a location
  for remote backups.
• Select Administration gt System Settings gt
  Configuration
• Remote Backup settings are used with the Database
  Backup settings on the Administration gt Log
  Server Management gt Configuration gt General page.

11
External PostgreSQL Server Support

• You can now specify an external PostgreSQL Server
  for the Log Server database
• Dimension supports PostgreSQL server v9.2, 9.1.9,
  or 9.1.11
• Select Administration gt Log Server Management gt
  Configuration

12
Log Server Management
13
IP Address Mapping

• Enable Dimension to replace device IP addresses
  with a name in some Dimension Dashboards and
  reports.
• Available for both dynamically addressed devices
  and devices with a static IP address.
• Select Administration gt IP Address Mapping.

14
IP Address Mapping
15
IP Address Mapping Dynamic IP Address Resolution

• If the source IP address is a private address, as
  defined in RFC 1918, Dimension can send a reverse
  DNS request to its name server and resolve the IP
  address to a name.
• Provides name resolution for DHCP environments.
• Requires the name server used by Dimension to
  provide reverse DNS lookups.
• When enabled, Dimension replaces the private IP
  address for dynamically addressed devices with
  the name the DNS server returns. This name
  appears in some Dimension Dashboards and reports.

16
IP Address Mapping Dynamic IP Address Resolution

• To enable dynamic IP address resolution
• Select Administration gt Log Server Management gt
  IP Address Mapping.
• In the Dynamic IP Address Resolution section,
  click Configure and enable the feature.

17
IP Address Mapping Static IP Address Map

• You can now manually create an IP address/name
  pair to replace a static IP address with a
  designated name in some Dimension Dashboards and
  reports.
• Names can be host names or other descriptive
  names.
• You can add IP address/name pairs for devices
  that are connected to Dimension and for devices
  that have not connected to Dimension.

18
IP Address Mapping Static IP Address Map

• Manually manage individual IP address/name pairs
• Select Administration gt Log Server Management gt
  IP Address Mapping.
• In the Static IP Address Map section, add, edit,
  or remove IP address/name pairs in the Static IP
  Address Map list.

19
IP Address Mapping Static IP Address Map

• To add many IP address/name pairs to the Static
  IP Address Map list, import a CSV file that
  includes the pairs.
• To modify the names assigned to any of the IP
  addresses in the list, export a CSV file of all
  the IP address/name pairs, change the names, and
  import the list again. The names are
  automatically updated.
• You cannot change the IP address in any IP
  address/name pair. You must remove the pair and
  add a new pair with the correct IP address.
• Reset the Static IP Address Map list to remove
  all IP address/name pairs from the list.
• Changes to the Static IP Address Map list are
  committed automatically. You do not have to save
  changes to the page before they take effect.
• Changes to the Static IP Address Map do not
  affect the settings for dynamic IP address
  resolution.

20
IP Address Mapping Reports for IP Address
Mapping

• The names that replace the IP addresses for
  dynamically addressed devices, and the names you
  specify for devices with static IP addresses,
  appear in some of the Dimension Dashboard pages
  and reports.
• Dashboard Reports
• Executive Dashboard Top Clients section
• Security Dashboard Blocked Clients section
• FireWatch
• Source tab Remains available when you filter on
  a name
• All tabs When you select View connections for
  for a name

21
IP Address Mapping Reports for IP Address
Mapping

• Available Reports
• Application Usage
• Top Applications by Host
• Top Hosts by Application
• Blocked Applications
• Top Blocked by Host
• Top Hosts Blocked
• Top Clients by Bandwidth
• Hosts (Sent and Received) pivot
• Hosts (Sent) pivot
• Hosts (Received) pivot
• Top Clients by Hits Hosts pivot
• Most Active Clients Report
• Web Audit Client pivot (for log messages
  without an authenticated user)
• WebBlocker Client pivot (for log messages
  without an authenticated user)
• Per Client Report If you specify the name in
  the search criteria

22
SMTP with TLS

• Dimension now supports sending notifications to
  SMTP gateways that require STARTTLS.
• Select Administration gt Log Server Management gt
  Configuration gt Notifications.
• Make sure to verify that the CA of the SMTP
  server certificate is trusted by Dimension. If
  the CA is not trusted, import the CA certificate
  to Dimension.

23
Reporting
24
Gateway AntiVirus and Intrusion Prevention
Service Reports

• If your device sends log message data about the
  Gateway AntiVirus (GAV) and Intrusion Prevention
  Service (IPS) subscription services, you can now
  see reports of the GAV and IPS data in Dimension.
• To see a GAV or IPS report
• From the Home page, select a device or group.
• Select the Reports tab.
• In the Detail section, select Gateway AntiVirus
  or Intrusion Prevention Service.

25
Send Scheduled Reports to an External Directory

• You can now send your scheduled reports may to an
  external directory on an FTP server or your
  remote backup directory.
• Before you can select to send a scheduled report
  to an external directory, you must add an FTP
  server to your Log Server configuration or
  specify a remote backup location.
• Add an FTP Server Administration gt Log Server
  Management gt Reporting gt FTP Servers
• Specify a remote backup locationAdministration
  gt System Settings gt Configuration gt Remote Backup

26
Send Scheduled Reports to an External Directory

• To send reports to an external directory
• Select Administration gt Schedule Reports.
• Add or edit a report schedule.
• Select Send reports to the specified directory
  and select an FTP server or remote backup
  location that you have already configured.

27
Thank You!