what’s new in watchguard xcs v9.1 update 1. watchguard xcs v9.1 update 1 enhancements that...
TRANSCRIPT
What’s New in WatchGuard What’s New in WatchGuard XCS v9.1 Update 1XCS v9.1 Update 1
WatchGuard XCS v9.1 Update 1
Enhancements that improve ease of use
• New Dashboard items Mail Summary > Mail Security
• Indicates status of each mail security service
• Security Connection, Kaspersky Anti-Virus, Anti-Spam, Reputation Enabled Defense (also displays Brightmail and McAfee if licensed)
• Yellow (Attention) or Red (Urgent) means a service cannot be contacted or Anti-Virus definitions are out-of-date
WatchGuard Training 22
WatchGuard XCS v9.1 Update 1
Enhancements that improve ease of use
• New Dashboard items Web Summary > Web Traffic > Web Security
• Indicates status of each web security service
• Security Connection, Kaspersky Anti-Virus, Reputation Enabled Defense, and URL Categorization)
• Yellow (Attention) or Red (Urgent) means a service cannot be contacted or Anti-Virus/URL category definitions are out-of-date
WatchGuard Training 33
WatchGuard XCS v9.1 Update 1
Enhancements that improve ease of use
• New Dashboard items Mail Summary > Mail Resources
• New graph of mail activity trends
WatchGuard Training 44
WatchGuard XCS v9.1 Update 1 Enhancements that improve ease of use
• New Dashboard items
• System Summary information originally located on the Status & Utility page is now incorporated into the Dashboard
System (Version, Uptime, Licensee, Admin & WebMail Users) Hardware (Appliance model, CPU, Memory, Disk Usage, RAID Status,
Swap Space)
WatchGuard Training 55
Click to expand or collapse each item
WatchGuard XCS v9.1 Update 1
• System Summary Dashboard page (continued) System Activity (CPU Load, Swap Space) Servers (DNS and NTP server status)
WatchGuard Training 66
WatchGuard XCS v9.1 Update 1
• Status & Utility Menu change Activity > Status > Status & Utility is now Activity > Status > Utilities System status and configuration info moved to the Dashboard Contains messaging controls and diagnostics
WatchGuard Training 77
9.1 Update 1Activity > Status > Utilities
WatchGuard XCS v9.1 Update 1
Enhancements that improve ease of use
• Anti-Spam page Accessed through Security > Anti-Spam > Anti-Spam You can more efficiently manage your Anti-Spam settings The initial view provides access to the most common Anti-Spam
options available for configuration To view advanced Intercept settings, click the Show Advanced
Options link
WatchGuard Training 88
WatchGuard XCS v9.1 Update 1
WatchGuard Training 99
WatchGuard XCS v9.1 Update 1 Enhancements that improve ease of use
• Pattern Filters page Improved to help you efficiently create and manage large lists of Pattern
Filters Pattern Filter lists are paginated You can now sort the list of Pattern Filters and use search parameters to
filter the list display
WatchGuard Training 1010
WatchGuard XCS v9.1 Update 1
Enhancements that improve ease of use The Pattern Filters Preferences page has been moved to Security >
Content Control > Custom Actions to allow you to create custom actions for the Pattern Filters and Content Rules features
WatchGuard Training 1111
WatchGuard XCS v9.1 Update 1
Additional functionality to make an already significant XCS solution even more powerful
• Improved Anti-Spam Analysis and Training Token Analysis feature enhanced to protect against new spam
obfuscation techniques and improve spam training Improved tokenization of URLs for the URL Block List feature Improved tokenization of HTML messages to prevent the
generation of tokens for non-visible elements of a message
WatchGuard Training 1212
WatchGuard XCS v9.1 Update 1
RTF Spam Analysis
• Scans and analyzes RTF (Rich Text Format) attachments for characteristics of spam
• Enabled by default in Security > Anti-Spam > Token Analysis > Advanced
WatchGuard Training 1313
WatchGuard XCS v9.1 Update 1
Reputation Whitelist
• Advanced Token Analysis training feature
• Provides additional legitimate mail training based on Reputation Enabled Defense whitelists of hosts that are known to send legitimate mail
• Enabled by default in Security > Anti-Spam > Token Analysis > Advanced
WatchGuard Training 1414
WatchGuard XCS v9.1 Update 1
Configure Advanced Intercept Settings Automatically
• Allows WatchGuard to automatically configure advanced Intercept settings (requires Security Connection)
• Automatically configures these advanced settings: Intercept Component Weights Reputation/UBL/DNSBL domains and timeout settings Advanced Token Analysis options
• Enable Image Analysis
• Enable PDF Analysis
• Analyze PDF text
• Analyze PDF images
• Enable RTF Analysis
• Legitimate mail and Spam training sources
• Legitimate mail and Spam limits and thresholds
• Dictionary spam count
• Reputation Whitelist
WatchGuard Training 1515
WatchGuard XCS v9.1 Update 1
Configure Intercept Settings Automatically (continued)• Disabled by default and configured in Security > Anti-Spam > Anti-Spam, or
Security > Anti-Spam > Intercept Settings
WatchGuard Training 1616
WatchGuard XCS v9.1 Update 1
Additional XCS v9.1 Update 1 enhancements
• Reputation Classification Statistics in Web Analysis Report The Web Analysis report now includes a section for Reputation
Enabled Defense (RED) Traffic Classification Indicates the number of web sites with good, neutral, and bad
reputations
1717WatchGuard Training
WatchGuard XCS v9.1 Update 1
Additional XCS v9.1 Update 1 enhancements• Web Reputation Lookup Moved
The Web Reputation Lookup utility has been moved from the Web Reputation page to the Utilities page located in Activity > Status > Utilities.
Use the Web Reputation Lookup utility to examine the reputation score of specific web domains.
Only appears if Web Reputation is enabled
1818WatchGuard Training
WatchGuard XCS v9.1 Update 1 Additional XCS v9.1 Update 1 enhancements• Deferred Mail Queue Monitoring
Allows you to set a threshold for monitoring the deferred mail queue and generate a critical alarm if the threshold is exceeded
Configured on the Configuration > Mail > Access page
• Alarms for Incoming Mail Queue Monitoring New system alarms alert you of minor (warning), medium (serious), and significant (critical) Queue Monitoring
events Incoming Mail Queue Monitoring is configured on the Configuration > Mail > Access page and allows you to adjust
the processing behavior on incoming mail connections depending on the current state of the incoming mail queue
1919WatchGuard Training
Introducing WatchGuard XCS v9.1
Additional XCS v9.1 Update 1 enhancements
• Symantec Brightmail™ Anti-Spam Upgrade Upgraded to version 6.2 to provide improved protection against the latest
types of spam messages Brightmail is an add-on subscription for customers who want to enable
multi-layered Anti-Spam engines Brightmail configuration options do not appear on the WatchGuard XCS
menu unless it is licensed
• McAfee® Anti-Virus Option Patch The McAfee Anti-Virus option no longer requires an installation patch McAfee Anti-Virus is an add-on subscription for customers who want to
enable multi-layered Anti-Virus protection McAfee configuration options do not appear on the Anti-Virus page
unless it is licensed
WatchGuard Training 2020
Install XCS v9.1 Update 1Install XCS v9.1 Update 1
If enabled, Security Connection automatically downloads update releases
• Install the update in Administration > Software Updates > Updates
• The update appears in the Available Updates section
• Select the update, then click Install
• The device restarts
This process can take up to 10 minutes to complete!
Install XCS v9.1 Update 1
WatchGuard Training 2222
Install XCS v9.1 Update 1
You can also download the update software from the LiveSecurity site
• From the Software Downloads page, download the XCS v9.1 Update 1 software [xcs91_update1.pf] to your local computer
WatchGuard Training 2323
Click to download
Install XCS v9.1 Update 1
Upload the software update in Administration > Software Updates > Updates
• Click Browse to find the downloaded file on your computer
• Click Upload
WatchGuard Training 2424
Install XCS v9.1 Update 1
The update appears in the Available Updates section Select the update, then click Install The device restarts
This process can take up to 10 minutes to complete!
WatchGuard Training 2525
Thank You!Thank You!