WIXLIB

SONICWALL GLOBALMANAGEMENT SYSTEMComprehensive security management, monitoring, reporting and analyticsA winning security management strategydemands deep understanding of thesecurity environment to promote betterpolicy coordination and decisions. Nothaving an enterprise-wide view of the fullsecurity construct often leavesorganizations at risk to preventablecyber-attacks and compliance violations.Using numerous tools running ondifferent platforms and reporting data indifferent formats make security analyticsand reporting operationally inefficient.This further impairs the organization’sability to quickly recognize and respondto security risks. Organizations mustestablish a systematic approach togoverning the network securityenvironment to overcomethese challenges.SonicWall Global Management System(GMS) solves these challenges. GMSintegrates management and monitoring,analytics, forensics and audit reporting.This forms the foundation of a securitygovernance, compliance and riskmanagement strategy. The feature-richGMS platform gives distributedenterprises, service providers and otherorganizations a fluid, holistic approachto unifying all operational aspects oftheir security environment. With GMS,security teams can easily manageSonicWall firewall, wireless accesspoint, email security and secure mobileaccess solutions, as well as third-partynetwork switch solutions. This is alldone via a controlled and auditablework-stream process to keep networkssharp, safe and compliant. GMSincludes centralized policy managementand enforcement, real-time eventmonitoring, granular data analytics andreporting, audit trails, and more, undera unified management platform.Benefits: Establishes a unified securitygovernance, compliance and riskmanagement security program Adopts a coherent and auditableapproach to security orchestration,forensics, analytics and reporting Reduces risk and provide a fastresponse to security events Provides an enterprise-wide view ofthe security ecosystem Automates workflows and assuressecurity operation compliance Operationalize firewalls at remote andbranch offices in four easy steps withZero-Touch Deployment Provisions, manages and monitors SDWAN deployment, connectivity andperformance centrally Reports on HIPAA, SOX, and PCI forinternal and external auditors Deploys fast and easy with software,virtual appliance or cloud deploymentoptions — all at a low costGOVERNS CENTRALLYCOMPLIANCERISK MANAGEMENT Establish an easy path to comprehensivesecurity management, analytic reportingand compliance to unify your networksecurity defense program Helps make regulatory bodies andauditors happy with automatic PCI,HIPAA and SOX security reports Move fast and drive collaboration,communication and knowledge acrossthe shared security framework Customize any combination of securityauditable data to help you move towardsspecific compliance regulations Make informed security policy decisionsbased on time-critical and consolidatedthreat information for higher level ofsecurity efficiency Automate and correlate workflowsto form a fully coordinated securitygovernance, compliance and riskmanagement strategyGMS provides a holistic approach to security governance, compliance and risk management

Workflow AutomationEmploying native workflow automation,GMS helps security operations conformto firewall policy change managementand auditing requirements of variousregulatory laws such as PCI, HIPPA andGDPR. It enables policy changes byapplying a series of rigorous proceduresfor configuring, comparing, validating,1. CONFIGUREAND COMPAREGMS configurespolicy changeorders and colorcodes differencesfor clearcomparisonsreviewing and approving firewall policiesprior to deployment. The approval groupsare flexible to comply with varyingauthorization and audit procedures fromdifferent types of organizations.Workflow automation programmaticallydeploys sanctioned security policies toimprove operational efficiency, mitigaterisks and eliminate errors.2. VALIDATEGMS performs anintegrity validationof the policy’s logic3. REVIEW &APPROVEGMS emailsreviewers and logsa (dis)approvalaudit trail of thepolicyGMS provides a holisticapproach to securitygovernance, complianceand risk management.4. DEPLOY5. AUDITGMS deploys thepolicy changesimmediately or ona scheduleThe change logsenable accuratepolicy auditing andprecise compliancedataGMS Workflow Automation: Five steps to error-free policy managementPartner Enabled ServicesNeed help to plan, deployor optimize your SonicWallsolution? SonicWallAdvanced ServicesPartners are trainedto provide you withworld class professionalservices. Learn more atwww.sonicwall.com/PES.2

Zero-Touch DeploymentIntegrated into GMS is the Zero-TouchDeployment service, which simplifies andspeeds the provisioning process forSonicWall firewalls at remote and branchoffice locations. The process requiresminimal user intervention and is fullyautomated to operationalize firewalls atscale in four easy deployment steps. Thissignificantly reduces the time, cost andcomplexity associated with installationand configuration, while security andconnectivity occur instantly andautomatically.STEP 1REGISTER THE FIREWALLRegisters the new firewall in MySonicWall using its assigned serialnumber and authentication code.STEP 2CONNECT THE FIREWALLConnects the firewall to the network using the ethernet cable that camewith the unit.STEP 3POWER UP THE FIREWALLPower up the firewall after connecting the power cable and pluggingit into a standard wall outlet. Units are automatically assigned a WANIP using DHCP server. Once connectivity is established, the unitis automatically discovered, authenticated, and added to CaptureSecurity Center with all licensed and configurations synchronized withMySonicWall and License Manager.STEP 4MANAGE THE FIREWALLThe unit is now operational and managed via the Capture Security Centercloud-based central management console such as firmware upgrades,security patching, and group level configuration changes.Zero-Touch Deployment: Operationalize firewall in four easy steps3

ReportingGMS offers over 140 pre-defined reportsas well as the flexibility to create customreports using any combination of auditabledata to acquire various use case outcomes.These outcomes include big-picture anddetailed awareness of network events,user activities, threats, operational andperformance issues, security efficacy,risks and security gaps, compliance4readiness, and even post-mortemanalysis. Every report is designed, withthe collective input from many years ofSonicWall customer and partnercollaborations. This provides the deepgranularity, scope and knowledge ofsyslog and IPFIX/NetFlow data needed totrack, measure and run an effectivenetwork and security operation.Intuitive graphical reports simplifymanaged appliance monitoring.Administrators can easily identify trafficanomalies based on usage data for aspecific timeline, initiator, responder orservice. They can also export reports to aMicrosoft Excel spreadsheet, portabledocument format (PDF) file or directly toa printer for regular business review.

Security management and monitoring featuresFeatureDescriptionCentralized security andnetwork managementHelps administrators deploy, manage and monitor a distributed network security environment.Federate policy configurationEasily sets policies for thousands of SonicWall firewalls, wireless access points, email security,secure remote access devices and switches from a central location.Change Order Managementand Work FlowAssures the correctness and compliance of policy changes by enforcing a process for configuring,comparing, validating, reviewing and approving policies prior to deployment. The approval groupsare user-configurable for adherence to company security policy. All policy changes are logged inan auditable form that ensures the firewall complies with regulatory requirements.All granular details of any changes made are historically preserved to help with compliance, audittrailing, and troubleshooting.Zero-Touch DeploymentSimplifies and speeds the deployment and provisioning of SonicWall firewalls remotely using thecloud. Automatically pushes policies; performs firmware upgrades; and synchronizes licenses.SD-WAN ProvisioningCentrally provision, manage and monitor SD-WAN deployment and connectivity with ease acrossa distributed enterprise environment.Sophisticated VPN deploymentand configurationSimplifies the enablement of VPN connectivity, and consolidates thousands of security policies.Offline managementEnables scheduling of configurations and firmware updates on managed appliances to minimizeservice disruptions.Streamlined license managementSimplifies appliance management via a unified console, as well as the management of security andsupport license subscriptions.Universal dashboardFeatures customizable widgets, geographic maps and user-centric reporting.Active-device monitoring andalertingProvides real-time alerts with integrated monitoring capabilities, and facilitatestroubleshooting efforts, thus allowing administrators to take preventative action and deliverimmediate remediation.SNMP supportProvides powerful, real-time traps for all Transmission Control Protocol/Internet Protocol (TCP/IP) and SNMP-enabled devices and applications, greatly enhancing troubleshooting efforts topinpoint and respond to critical network events.Application Visualizationand IntelligenceShows historic and real-time reports of what applications are being used, and by which users.Reports are completely customizable using intuitive filtering and drill-down capabilities.Rich integration optionsProvides application programming interface (API) for web services, command line interface(CLI) support for the majority of functions, and SNMP trap support for both service providersand enterprises.Dell Networking X-Series switchmanagementDell X-Series switches can now be managed easily within TZ, NSA and SuperMassive seriesfirewalls to offer single-pane-of-glass management of the entire network security infrastructure.Closed Network SupportDeploy GMS in closed environments, such as highly protected government networks. All licensekeysets and signature files from SonicWall backend services are packaged, encrypted and securelytransferred to the local file system, where GMS can access, upload and then push requiredupdates to all managed security appliances.Security reporting and analyticsFeatureDescriptionBotnet ReportIncludes four report types: Attempts, Targets, Initiators, and Timeline containing attack vectorcontext such as Botnet ID, IP Addresses, Countries, Hosts, Ports, Interfaces, Initiator/Target,Source/Destination, and User.Geo IP ReportContains information on blocked traffic that is based on the traffic’s country of origin ordestination. Includes four report types: Attempts, Targets, Initiators, and Timeline containingattack vector context such as Botnet ID, IP Addresses, Countries, Hosts, Ports, Interfaces,Initiator/Target, Source/Destination, and User5