Firewall Log Analysis Software

Firewall Analyzer - Release Notes

Listed here are the feature enhancements, bug fixes and limitations of each release update of Firewall Analyzer.

• 7.2 Build 7021

• 7.2 Build 7020

For further information please contact Firewall Analyzer Support.

7.2 Build 7021

GA release of Firewall Analyzer.

7.2 - Build 7021 - Standalone Edition

The general features available in this release are:

• Optimized the connection between Firewall and Firewall Analyzer, to fetch rules

7.2 Build 7020

GA release of Firewall Analyzer.

7.2 - Build 7020 - Distributed Edition

GA release of Firewall Analyzer Distributed Edition.

New Features - Collector Server

• Collector Server contains all the features of Firewall Analyzer Standalone Edition

7.2 - Build 7020 - Standalone Edition

The general features available in this release are:

1. New Device/Log Format supported
   • Palo-Alto Firewall
     
   • Juniper SSLVPN 6500 
     
   • Check Point VSX firewalls
   • FortiGate WebFilter, DLP,  IPS modules and IPSec support
     
2. Application reports for Fortigate firewalls based on Application Control service
3. Support for Virtual Firewalls of Cisco, Fortigate, and Check Point devices. By default, each context/vdom is displayed as separate device
4. Alerts based on bandwidth utilization of a specific interfaces
5. Client UI and email notification for Firewall Status Alerts for the following conditions:
   • Lack of disk space
   • Syslog server down
6. View unused ACEs details of ACLs, for Cisco devices available in Unused Rules report
   
7. Real-time Syslog collection from Squid proxy server supported
   
8. Complete time duration details of the VPN user sessions available in 'VPN User Session Details' reports under VPN Reports
9. Option to export 'VPN User Session Details' report to other formats, while clicking 'View All' link
   
10. Zone based and interface specific Live reports using SNMP for Netscreen devices
    
11. Change Management Report for Juniper SRX device available
12. Option to fetch Rules and Configurations for any CLI supported device to get Unused Rules, Compliance and Change Management reports
    
13. New format for Email alert to cater for context based Configuration Changes
    
14. Optional privilege available to 'Guest' user to view the generated alerts for the assigned device(s)
15. Optional privilege available to 'Guest' user to view the Report Profile(s) assigned by Administrators 

1. Identifying Device IP address from the logs imported from Blue Coat proxy server
   
2. Collecting intermittent logs of VPN sessions support for SonicWALL, Cisco, Checkpoint and Netscreen Firewall devices
3. Added page navigation component in 'Raw Log Search' result page
4. Importing log files with non-English names/folders from remote machines using FTP is supported
5. Allowed special characters in SNMP Community string to fetch SNMP data from devices
6. Issue in Diagnose Connections when the interface name had special characters

Known Issue

• You can not use Active Directory or RADIUS Server Authenticated Admin user credentials for Data Collection in Admin Server (i.e., from Edit Collector Details page of Collector Settings)