Whats New in Dimension v211 New Dimension Administrator user role Integration with WatchGuard WiFi Cloud Xforwarded detail in proxy headers shows client IP addresses in log messages Localization of Dimension v21 UI ID: 541277
Download Presentation The PPT/PDF document "What’s New in Dimension v2.1.1" is the property of its rightful owner. Permission is granted to download and print the materials on this web site for personal, non-commercial use only, and to display it on your personal computer provided you do not modify the materials and that you retain all copyright notices contained in the materials. By downloading content from our website, you accept the terms of this agreement.
Slide1
What’s New in Dimension v2.1.1Slide2
What’s New in Dimension v2.1.1
New
Dimension Administrator user roleIntegration with WatchGuard Wi-Fi Cloud X-forwarded detail in proxy headers shows client IP addresses in log messagesLocalization of Dimension v2.1 UISupport for Firebox T70
2Slide3
Dimension Administrator
3Slide4
Dimension Administrator
New Dimension Administrator user role
User privileges are restricted to monitoring and management of the Dimension systemCannot see or manage devices, VPNs, or servers that are connected to DimensionCannot see reports or log messages from devices, VPNs, or servers that are connected to DimensionDoes not have access to anonymized data
4Slide5
5
Wi-Fi Cloud IntegrationSlide6
Wi-Fi Cloud Integration
From Dimension, you can connect directly to your instance of WatchGuard Wi-Fi Cloud
You can see log messages and reports about your AP devices in Dimension, and then click the direct Wi-Fi Cloud link on the Dimension Home page to connect to Wi-Fi Cloud and manage your AP devicesAfter you click the Wi-Fi Cloud link, if you are not already logged in to the WatchGuard website, you are prompted for your WatchGuard account credentials
6Slide7
Wi-Fi Cloud Integration
7Slide8
X-forwarded information from the proxy header includes the IP addresses of clients behind a proxy policy
See X-Forwarded Details in Proxy Headers
8Slide9
See X-Forwarded Details in Proxy Headers
Log messages and Dimension reports can now show the IP addresses of clients behind proxy policies
The Firebox sends the IP address of the proxy server (for example, Squid, Webmarhal, and XCS) and the client IP address in the X-forwarded information from the header, which can now be found in the log messages in the ori_src detail
9Slide10
See X-Forwarded Details in Proxy Headers
10Slide11
See X-Forwarded Details in Proxy Headers
Example log message shows the
ori_src detail:<ProxyMatch
d="2016-09-02T10:54:35"
orig
="
gary_xtmv
"
cname
=""
proc_id
="http-proxy"
pri
="6"
rc
="594"
seq
="276"
disp
="Deny"
msg_id
="1AFF-0028"
src_intf
="1-Trusted"
dst_intf
="0-External" policy="HTTP-proxy-00"
src_ip
="10.0.1.2"
dst_ip
="100.100.100.3"
src_port="41208" dst_port="80" pr="http/tcp" msg="ProxyDrop: HTTP Virus found" proxy_act="HTTP-Client.Standard.1" ori_src="1.1.1.1" virus="Object tmp/scan_03.UTvg4d detected as PUP (Potentially Unwanted Program)" host="100.100.100.3" path="/ss/0db44a8f3bffa0488793e15e1076efcc7b6d77f5bc436ffe6bf6f65cfb5e20a9" log_type="tr"/><ProxyHTTPReq d="2016-09-02T10:54:35" orig="gary_xtmv" cname="" proc_id="http-proxy" pri="6" rc="525" seq="277" disp="Allow" msg_id="1AFF-0024" src_intf="1-Trusted" dst_intf="0-External" policy="HTTP-proxy-00" src_ip="10.0.1.2" dst_ip="100.100.100.3" src_port="41208" dst_port="80" pr="http/tcp" msg="HTTP request" proxy_act="HTTP-Client.Standard.1" ori_src="1.1.1.1" op="GET" dstname="100.100.100.3" arg="/ss/0db44a8f3bffa0488793e15e1076efcc7b6d77f5bc436ffe6bf6f65cfb5e20a9" sent_bytes="233" rcvd_bytes="2406296" elapsed_time="0.026119 sec(s)" reputation="-1" reason="262184" action="drop" log_type="tr"/>
11Slide12
See X-Forwarded Details in Proxy Headers
When you review log messages and reports, instead of the IP address of the proxy server, you now see the real IP address of the client where the traffic originated
Available for log messages and reports from Fireboxes that run Fireware OS v11.12 and higher (Fireware OS v11.12 will be available in November 2016)12Slide13
Other Enhancements
13Slide14
Other Enhancements
Localization of Dimension v2.1 UI
The v2.1.1 release includes localization of the v2.1 Dimension UI content and v2.1 Dimension HelpSupport for Firebox T70Firebox T70 is now supported in Dimension v2.1.1The Firebox image and icon now appear on the Device pageThe Device Friendly Name is now added when you add a T70 to Dimension
14Slide15
Thank You!
15Slide16