Transcript What`s New in Fireware XTM v11.8.3

What’s New in
Fireware XTM v11.8.3
WatchGuard Training
What’s New in Fireware XTM v11.8.3
 Support for Firebox T10
 Wireless Enhancements
•
•
•
Gateway Wireless Controller Dashboard shows statistics for WatchGuard AP
devices [78128]
Wireless System Status page shows statistics and connected clients for XTM
wireless access points [77757]
New XTM wireless mode for 802.11g and 802.11n [65404]
 Mobile VPN with SSL client update [77562]
 Netgear 341U 3G/4G modem support [78226]
 XTM Configuration Report Enhancements [78448, 78429, 78392, 78391,
78201, 78172, 72947, 76980, 78390]
 Download support.tgz file option moved to the System Status pages in
Fireware XTM Web UI [78038]
WatchGuard Training
2
What’s New in Fireware XTM v11.8.3
 Changes to Managed Device Details
•
•
The management mode, management groups, Management Tunnel status, and
OS version appear on the Folder page for each device in the folder [78041]
The Device page now includes the Management Tunnel Information section
with the Management Tunnel details [78174]
 Send the WSM Output window log messages to a file [78361]
WatchGuard Training
3
Firebox T10 Support
WatchGuard Training
4
Firebox T10 — Specifications
 Firebox T10 hardware
•
•
•
•
3 10/100/1000 ports
Console port
On/Off power switch
USB port
 Throughput
•
•
•
•
•
Firewall — 200 Mbps
VPN — 30 Mbps
AV — 70 Mbps
IPS — 80 Mbps
UTM — 55 Mbps
 VPN Tunnels
•
•
•
Branch Office VPN — 5
Mobile VPN IPSec — 5
Mobile VPN SSL/L2TP — 5
WatchGuard Training
5
Firebox T10 — Software
 Manufactured with Fireware v11.8.2.
 Managed by WatchGuard System Manager v11.8.3 or higher.
 Functionality is similar to XTM 2 Series and 3 Series:
•
•
•
•
•
Supports modem failover
spamBlocker default scan limit is 60 Kb
WebBlocker cache size is 8K
DLP – standard set of DLP content control rules, no text extraction
Steps to reset the device to factory-default settings are the same as for XTM 33
and XTM 2 Series.
 Fireware Pro is not available.
•
T10 does not support features that require Fireware Pro, such as FireCluster,
OSPF, BGP, server load balancing, multi-WAN (except modem failover)
WatchGuard Training
6
Mobile VPN with SSL Client Update
WatchGuard Training
7
Mobile VPN with SSL Client Update
 In the new Mobile VPN with SSL clients for Windows and Mac OS X, the
Server text box is now a drop-down list.
•
•
•
You can type or select the IP address of the device to connect to.
The most recently used IP address is selected by default.
Any server IP address that you connect to is automatically added to the dropdown list.
 For the Windows client, the server list is stored in the Windows registry.
 For the Mac OS X client, the server list is stored in application preferences.
 The default port is 443.
•
If you do not specify a port, 443 is used.
WatchGuard Training
8
XTM Configuration Report
Enhancements
WatchGuard Training
9
XTM Configuration Report
 The XTM Configuration Report available in the Fireware XTM Web UI has
been improved to include more complete configuration information about:
•
•
•
•
•
•
•
•
Branch Office VPN Gateway Endpoints [78448]
Mobile VPN with IPSec [78429]
Mobile VPN with PPTP [78391]
Gateway AntiVirus [78201]
spamBlocker [78392]
Application Control [78172]
WebBlocker with Websense Cloud [72947]
Alias members [76980]
WatchGuard Training
10
Wireless Enhancements
WatchGuard Training
11
WatchGuard AP Device Monitoring Enhancements
 Gateway Wireless Controller Summary tab has real-time statistics and top
connection widgets.
WatchGuard Training
12
WatchGuard AP Device Monitoring Enhancements
 Click the header of a Summary tab widget to see more information for each
connection category.
 Click any connection item in a Summary tab widget to pivot on the
connection data and see more information about that connection.
WatchGuard Training
13
WatchGuard AP Device Monitoring Enhancements
 The Access Points tab now shows statistics about current traffic sent and
received per AP device.
WatchGuard Training
14
WatchGuard AP Device Monitoring Enhancements
 The Wireless Clients tab shows:
•
•
Graphical indication of traffic per wireless client
Manufacturer associated with the MAC address for each wireless client
WatchGuard Training
15
WatchGuard XTM Wireless Monitoring Enhancements
 For an XTM wireless device, the Wireless Statistics System Status page
now shows traffic statistics for each Access Point and each client.
WatchGuard Training
16
New Wireless Mode for XTM Wireless Devices
 You can now set the wireless mode
for the 2.4 GHz band to allow only
802.11n and 802.11g clients.
 This prevents connections from
legacy 802.11b clients, which can
slow overall wireless performance.
WatchGuard Training
17
Download Support Log Messages
WatchGuard Training
18
Download a Support File from the System Status Pages
 The option to download the support.tgz file from Fireware XTM Web UI was
added to the System > Configuration File page in v11.8.1.
 In v11.8.3, this option has been moved to the
System Status > Diagnostics page, Diagnostics File tab.
WatchGuard Training
19
Download a Support File from the System Status Pages
WatchGuard Training
20
Changes to Managed Device Details
WatchGuard Training
21
Folder Page Include Management Details for Devices
 On the Folder page for each device folder in WSM, you can now see the
management mode, management groups, Management Tunnel status, and
OS version for each device in the folder.
WatchGuard Training
22
New Management Tunnel Information Section
 On the Device page for
centrally managed
devices at either end of a
Management Tunnel, the
Management Tunnel
Information section now
appears, with the details
of the Management
Tunnel.
WatchGuard Training
23
WSM Output Window
WatchGuard Training
24
Save the WSM Output Window Log Messages to a File
 You can now configure WSM to send
the log messages from the WSM
Output window to a file.
 In WSM, select Edit > Options and
select the Save Output Window logs
to a file check box.
 On the computer where WSM is
installed, review the wsm.log file in the
C:\Users\[user]\AppData\Roaming\
WatchGuard\ directory.
WatchGuard Training
25
Thank You!
WatchGuard Training
26