SonicWall Analytics

Overview

Dell SonicWALL Analytics for Splunk performs analytics on the traffic traversing Dell firewalls. It monitors IPFIX data flows in real-time to alert enterprises of security incidents detected by Dell firewalls. It provides statistical reports and graphic visualizations of the firewall traffic to enable a rigorous investigation of cybersecurity threats and an examination of anomalous data. It includes pre-configured dashboards for:

· Application usage by location, frequency, and time
· Threats detected
· DNS usage by server by hits
· URLs detected by firewall, rating, domain, and sub-domain
· Search usage by frequency, search engine, and website
· Peer-to-peer file sharing traffic by firewall and user
· VoIP by call volume and packet loss
· Dell License usage by firewall and IPFix message type

Download Dell SonicWALL Analytics for Splunk and gain greater insight and security for your data network.

Release Notes

Version 2.0

July 2, 2015

Added:
- Dell Icons
- IPFix v2 templates
- v2 Dashboards
- Drilldowns from Summary Dashboard
- Auto refresh of graphs on dashboards

Version 1.0.4

Nov. 3, 2014

fixed a couple of typos (spelling)

Version 1.0.3

Oct. 30, 2014

Updated to fix typo in branding.

Version 1.0.2

Oct. 28, 2014

more bugfixes for lookup/sonicwall_firewalls.csv
updated install guide

Version 1.0.1

Oct. 13, 2014

sonicwall_hostnames.csv has been replaced by sonicwall_firewalls.csv. Automatic lookup will auto populate this table. This fixes the need to name your firewalls before they work in the dashboards. You can edit the name in this table and replace the IP so you get a more friendly name.
sonicwall_os_guess.csv and automatic lookup have been disabled. This will make the warning go away in the dashboards.

Version 1.0

Sept. 16, 2014

First Release

4,458

Downloads

Share Subscribe

Version

Built by

Codey Shriner

Support

Not Supported

Questions on Splunk Answers Flag as inappropriate

App Contents: Inputs