On-Premises Analytics ESXi Deployment Guide

Installing On-Premises Analytics on ESXi > Adding Firewalls to On-Premises Analytics
Table of Contents

Adding Firewalls to On-Premises Analytics

To add firewalls to On-premises Analytics

  1. Navigate to HOME | Overview > Status and click the Device Manager icon.

  2. Click add icon +.

  3. Enter the Friendly Name, the Serial Number, and the Model of the firewall.

  4. Click OK.

  5. Navigate to a browser window and log into the firewall.

    6. For IPFIX-based instances, follow steps 6 to 10 below.

    For Syslog-based instances, go to Step 11.

  6. Navigate to MANAGER | Appflow Settings > Flow Reporting | GMSFlow Server.

  7. In the GMSFlow Server screen,

    1. Enable Send AppFlow to SonicWall GMSFlow Server.
    2. Enable Send Real-Time Data To SonicWall GMSFlow Server.

  8. Navigate to Manage > AppFlow Settings | GMS Flow Servers.

  9. In the GMS Flow Servers page,

    1. Enter the IP address of the Analytics instance in the GMS Flow Server Address field (this is your Analytics deployment IP adress).

    2. Click Test Connectivity to ensure the Analytics instance is accessible. The UP/REGISTERED message should appear.

      If connectivity with the Analytics instance is a problem, go to MySonicWall and check that the firewall and Analytics instance are in the same Group or tenancy.

    3. When configuration in this panel is complete, click Accept at the bottom of the page.

  10. Repeat Step 2 to Step 9 for each firewall in the Group that you want to analyze IPFIX data from.

    11. To configure firewalls to send syslogs to a Syslog-based Analytics instance

  11. Navigate to MANAGE > Log Settings > SYSLOG, click Add.

  12. Enter the firewall details,

    1. Select Name or IP address from the dropdown list.
    2. Select Server Type as Syslog Server from the drowndown list.
    3. Enter other parameters as required.

  13. Navigate to Log Settings > Base Setup and click Import Template.

  14. Select Analyzer / Viewpoint / GMS as template and click Accept.

  15. Repeat Step 11 to Step 14 for each firewall in the Group or tenancy you wish to receive Syslog data from.

  16. To complete licensing for a Syslog-based Analytics instance, go to Activating Firewall Licensing for Syslog-Based On-Premises Analytics