en-US
search-icon

Cloud GMS Admin Guide

Console

Configuring Change Management

This includes the following:

Introduction to Change Management

To begin, start by defining the members of the various policy Approval Groups (see Approval Groups in the sections that follow). These members have the final word on whether a proposed change order is approved or denied. You can create Approval Groups for each module, and those groups can exist with one or more notification users.

The process by which change orders are approved, fully approved, partially approved, or denied begins at the submission level and progresses through the various levels defined by the change approval group. By default, until defined, the approval group.

After your Approval Groups have been established for each module, you can manage change orders for approving, scheduling, and executing (or processing) proposed changes through Change Order Management (see Change order management in the sections that follow).

Settings

On the Console > Workflow > Settings page, you can enable Workflow, configure default schedule settings, and delete Cloud GMS change order data.

This section contains the following Settings topics:

Configuring Change Order Default Schedule Settings

To configure a regular schedule to manage change orders, complete the following steps:
1
Click the radio button next to the desired instance you would like change orders to go into effect. Choose between Execute Manually, Immediate on Approval, or to change at a time you select from the pull-down menu.
2
Click Update to accept the changes you have made.

Deleting Cloud GMS Change Order Data

You can manually delete Change Orders that are more than two years old and no longer necessary. This is a one-time action that is executed based on the date selected for deletion. The delete action in this screen only purges data, tasks, and logs related to Change Orders.

To delete Cloud GMS Change Order Data, complete the following steps:
1
Click the Console tab.
2
Expand the Workflow tree and click Settings. The Settings page displays.
3
In the Delete Cloud GMS Change Order Data section, choose a date older than two years at which point to delete the outdated Change Orders.
4
Select the Domain from which to delete the Change Orders.
5
Click Update to accept the changes you have made.

Change Orders

You can add changes on any screen to create a change order. The changes can be added to existing change orders or you can create new change orders on the fly.

From the Console tab, the Workflow > Change Orders screen provides the required functions for change order management. There, you can add, edit and delete change orders.

A change order should have at least one Approval Group associated with it. The approvers in that approval group would approve the change order.

You can configure a schedule for processing or executing change orders after their approval and then create tasks for the target appliances.

Change orders can also be scheduled at the Default, or with one of three options: a) Execute Manually b) Immediate on Approval c) On a given schedule. “At.” When change orders are executed manually, click Execute Manually under Schedule for the change order. The Execute option is enabled only after the change order has been fully approved. The change order reaches the fully approved state after it is accepted by all the members of the approval group associated with the change order.

When a change order is scheduled to execute Immediate on Approval, the change order is directly picked up for processing, task creation, or execution after the change order has reached the fully approved state.

When a change order is scheduled on a particular schedule, it is picked up for processing, task creation, or execution as soon as the schedule is met, provided the change order has reached the fully approved state at that point. If a change order has not been fully approved before the schedule is met or it has lapsed, the change order cannot be implemented. The change order has to be reopened and then resubmitted with a new schedule. However, if the change order has been scheduled on a recurring schedule, it will get picked up for processing at the next scheduled occurrence only after the change order has reached the fully approved state.

Select any one of the three scheduling options as a default selection on the Workflow > Settings screen.

You can view changes made to any change order. The view functionality shows the change objects on a per screen basis.

To schedule approvals at a specific time, complete the following steps:
1
Click the radio button for At and select a schedule from the pull-down.

2
Click Add Schedule.

You can also preview a change order. The preview functionality shows a preview of the changes to be applied to the Running Configuration after a change order is selected on the screen.

The Compare option shows the difference between two change orders.

Additional Change Order information

This section discusses additional items related to Change Order Management.

It describes the outcome of when a unit is removed from management, a user is no longer with the company, or when a domain is deleted altogether. Each of these actions would trigger the cleanup of data.

To delete a user, complete the following steps:
1
Remove the user from the system.
2
Remove references to the approval groups in which that user took part.
a
As an Approver
b
As a Notificant
3
History regarding this user is archived and still available.
To delete a unit:, complete the following steps:
1
Remove any active or pending changes from the change orders for this unit.
2
References to this unit in Archived Change Orders are replaced with the serial number of this unit, instead of the Unit ID, which is no longer present.
3
History regarding this unit is archived and still available.
To delete a domain, complete the following steps:
1
Delete all change orders (active, pending, and processed) from the system.
2
All approval groups (including defaults) are deleted.
3
Archived Tasks, Logs, and related information are removed and no longer available.

Managing Scheduled Tasks

This describes how to configure scheduled tasks and default tasks in the Console > Tasks page.

This includes the following:

Scheduled Tasks

As you complete multiple tasks through the SonicWall™ Cloud Global Management System (Cloud GMS) UI, Cloud GMS creates, queues, and applies them to the SonicWall appliances. As Cloud GMS processes tasks, some SonicWall appliances might be down or offline. When this occurs, Cloud GMS requeues the tasks and reattempts the changes.

To view and manage pending tasks, complete the following steps:
1
Click the Console tab, expand the Tasks tree and click Scheduled Tasks.
The Scheduled Tasks page displays.

2
Each task entry contains the following fields:
Number (#)—specifies the number of the task entry.
SonicWall—specifies the name of the SonicWall appliance to which the task applies.
Description—contains a description of the task.
Creation Time—specifies the date and time the task was generated.
Scheduled Time (Local)—time the task was scheduled in the local time zone of the appliance.
Scheduled Time (Agent)—time the task was scheduled in the time zone of the agent.
No. of Attempts—specifies the number of times Cloud GMS has attempted to execute the task.
Last Error—if the task was not successfully executed, specifies the error.
SCloud GMS User—specifies the user who created the task.
Agent—specifies the IP address of the agent. This column can accept/display IPv6 and IPv4 addresses.
3
To narrow the search, enter one or more of the following search criteria and click Start Search:
* 
TIP: You can press Enter to navigate from one form element to the next in this section.
Calendar—select the period of time for which Cloud GMS displays tasks. The pull down menu to the right enables you to specify that the date range applies to the task creation time, the local scheduled time, and the agent scheduled time.
SonicWall Node—displays all tasks associated with the specified SonicWall appliance.
Description contains—displays all tasks that contain the specified text.
Owner—displays all tasks with the specified owner.
Task ID—displays the task with the specified task ID.
4
To execute one or more scheduled tasks immediately, select their check boxes and click Execute the tasks selected now. You can also select al l of the tasks on the page by checking Select Only the 10 Tasks Displayed Above, or select all tasks by checking Select All Pending Tasks.
5
To reschedule one or more pending tasks for another time, select their check boxes and click Re-schedule the tasks selected. The Cloud GMS Date Selector dialog box displays.

6
Select a new date when the task executes and click OK. The dialog box closes and the task executes at the selected time.
* 
NOTE: The task(s) executes based on the time setting of the SonicWall Cloud GMS agent server, UTC, or local browser's time.
7
To delete one or more tasks from the list of pending tasks, select their check boxes and click Delete the tasks selected. To delete all pending tasks, select Select all Tasks and click Delete the tasks selected.

Configuring Log Settings

This describes how to configure Log Settings. This includes adjusting settings on deleting log messages after a certain period of time, and setting criteria for viewing logs.

This includes the following:

Configuring Log Settings

In the Log > Configuration screen, you can delete or archive SonicWall™ Cloud Global Management System (Cloud GMS) log messages. The Archive process archives the data to the “archivedLogs” directory as per the Archive Log Schedule, before the data is deleted from the database.

* 
NOTE: For UMH deployments, to offload the archived log files to a local drive, login to the /appliance management interface, then navigate to the System > File Manager page.

To configure Log settings, select between the following options:

Delete Log Messages Older Than — Select the month, day, and year, and then click the Delete link.
Enable Archive — Select this check box to enable Cloud GMS log message archiving.
Archive Cloud GMS log messages for — Select the number of months to archive log messages.
Max Num of Log Message Files — Select the maximum number of monthly archive files kept in the achivedLogs folder.
Delete Data Every — Select a reoccurring day and time to delete data.
Archive Format — Select the type of format to archive the Cloud GMS log messages. Choose between CSV or HTML.
Update — Click Update after your settings are selected.
* 
NOTE: The archive process first archives the data to the archivedLogs directory as per “Archive Log Schedule” and then the data is deleted from the database.

Configuring Log View Search Criteria

The Cloud GMS log keeps track of changes made within the Cloud GMS UI, logins, failed logins, logouts, password changes, scheduled tasks, failed tasks, completed tasks, raw syslog database size, syslog message uploads, and time spent summarizing syslog data.

To view the Cloud GMS log, complete the following steps:
1
Click the Console tab, expand the Log tree, and click View Log. The View Log page displays.

2
Each log entry contains the following fields:

#—specifies the number of the log entry.
Date—specifies the date of the log entry.
Message—contains a description of the event.
Severity—displays the severity of the event (Alert, Warning, or FYI).
SonicWall—specifies the name of the SonicWall appliance that generated the event (if applicable).
User@IP—specifies the user name and IP address.
3
To narrow the search, configure some of the following criteria:
* 
TIP: You can press Enter to navigate from one form element to the next in this section.
Select Time of logs—displays all log entries for a specified range of dates.
SonicWall Node—displays all log entries associated with the specified SonicWall appliance.
Cloud GMS User—displays all log entries with the specified user.
Message contains—displays all log entries that contain the specified text. This input field provides an auto-suggest functionality that uses existing log message text to predict what you want to type. It fills in the field with the suggested text and you can either press Tab to accept it or keep typing. Different suggestions appear as you continue to type if log messages match your input.
Severity—displays log entries with the matching severity level:
All (Alert, Warning, and FYI)–where FYI mean “For Your Information”
Alert and Warning
Alert
Select Match case to make the SonicWall Node, Cloud GMS User, and Message contains search fields case sensitive.
Select one of Exact Phrase, All Words, or Any Word.
Exact Phrase matches a log entry that contains exactly what you typed in the Message contains field
All Words matches a log entry that contains all the words you typed in the Message contains field, but the words can be non-consecutive or in any order
Any Word matches a log entry that contains any of the words you typed in the Message contains field
4
To view the results of your search criteria, click Start Search. To clear all values from the input fields and start over, click Clear Search. To save the results as an HTML file on your system, click Export Logs and follow the on-screen instructions.
5
To configure how many messages are shown per screen, enter a new value between 10 and 100 in the Show Messages Per Screen field. (default: 10). Click Next to display the next page, or click Previous to display the preceding page.
6
To jump to a specific message, enter the message number in the Go to Message Number field.

Configuring Console Management Settings

This describes the settings available on the SonicWall™ Cloud Global Management System (Cloud GMS) Console tab in the Management section and describes the settings available on the Console tab in the Management section. The following is found:

Users

To operate in complex environments, Cloud GMS is designed to support multiple users, each with his or her own set of permissions and access rights. This section contains the following subsections:

* 
NOTE: If you do not want to restrict access to SonicWall appliances or SonicWall Cloud GMS functions, but want to divide SonicWall Cloud GMS responsibility among multiple users, use views to provide specific criteria to display groups of SonicWall appliances. Depending on the type of task they are trying to complete, users can switch between these views as often as necessary. For more information, refer to Configuring Action Permissions.
* 
NOTE: All of the user configuration options are available through the command-line interface. For more information, refer to the Cloud GMS Command-Line Interface Guide.

Creating User Groups

A user group (or user type) is a group of Cloud GMS users who complete similar tasks and have similar permissions.

Cloud GMS provides three pre-configured groups:

Administrators—Full view and update privileges.
End Users—No privileges.
Guest Users—No privileges.
Operators—View privileges only.
To create a new group, complete the following steps:
1
Click the Console tab, expand the Management tree and click Users. The General Page of the User screen displays.
2
In the middle pane, right-click End Users and select Add User from the pop-up menu. The Add User dialog box displays.
3
In the dialog box, enter the name of the new user, a password, confirm the password, and then click OK. The new user is added to the list under End Users.
4
In the right pane, enter any comments regarding the new user group in the Comments field.
5
Select a default view for the new user group from the Default View pull-down menu. This view is displayed for members of the user group when they first log in to Cloud GMS.
6
To force all users in the user group to change their passwords, select Change Password.
7
To delete the user when they become inactive, select Delete Inactive.
8
To set a date when the user type will become inactive, click in the Active Until field and then select a date from the popup calendar.
9
To keep the user type active at all times without an end date, select Always Active.
10
Select the schedule for when the user group is active from the pull-down list in the Schedule field.
11
Click Update. The new user group is added. By default, the new group has no privileges. To configure screen access settings, refer to Moving a User.

Adding Users

This section describes how to create a new user. Although the user inherits all group settings, individual user settings overrides the group settings.

To add a new user, complete the following steps:
1
Click the Console tab, expand the Management tree and click Users. The General Page of the User configuration screen displays.

2
In the middle pane, right-click Administrators, End Users, or Guest Users and select Add User from the pop-up menu. The Add User dialog box displays.
3
In the dialog box, enter the name of the new user, a password, confirm the password, and then click OK. The new user is added to the list under End Users.
4
In the right pane, enter any comments regarding the new user group in the Comments field.
5
Select a default view for the new user group from the Default View pull-down menu. This view is displayed for members of the user group when they first log in to Cloud GMS.
6
To force all users in the user group to change their passwords, select Change Password.
7
To delete the user when they become inactive, select Delete Inactive.
8
To set a date when the user type will become inactive, click in the Active Until field and then select a date from the popup calendar.
9
To keep the user type active at all times without an end date, select Always Active.
10
Select the schedule for when the user group is active from the pull-down list in the Schedule field.
11
Click Update. The new user group is added. By default, the new group has no privileges. To configure screen access settings, refer to Moving a User.
12
From the General tab, select the new user.
13
Enter the full name of the user in the Name field.
14
Enter contact information for the user in the Phone, Fax, Pager, and Email fields.
15
Select the default view for the user from the Default View list box.
16
Enter any comments regarding the new user in the Comments field.
17
Check SuperAdmin to enable privileges for this user across all domains.
* 
NOTE: By default, permissions for users exist only within the domain to which they belong. By checking the SuperAdmin option, permissions are extended across all domains.
18
Enter the number of minutes that the user can be inactive on his computer before the session times out in the Inactivity Timeout field. Enter -1 to never time out.
19
To change the password for the user, type in the password in the New Password field, and then type it again in Confirm Password.
20
To disable the user without deleting the entire entry, select Account Disabled.
21
To force the user to change his password, select Change Password.
22
To delete the user when the account becomes inactive, select Delete Inactive.
23
To set a date when the user becomes inactive, click in the Active Until field and select a date from the popup calendar.
24
To keep the user active without an end date, select Always Active. If this is selected, the date in the Active Until field is ignored.
25
Select a schedule when the user is active from the pull-down list in the Schedule field.
26
Do one of the following:
Click Inherit Permissions from Group. The user inherits the permissions from the group that you right-clicked to begin this procedure.
Click Update. The new user is added. You must configure the user’s permissions. See Moving a User and Configuring Appliance Access.
Click Reset to change all fields in this screen to their default values and start over.
* 
NOTE: To temporarily disable a user account, select Account Disabled and click Update.

Moving a User

When new users log in to SonicWall Cloud GMS for the first time, they are considered guest users and have only limited access.

To change a SonicWall Cloud GMS user’s group:

1
Log in as the remote domain’s administrator.
2
Navigate to the Console tab.
3
Navigate to the Management > Users page.
4
Select the user to be moved from the user list.
5
Right-click the user's name in the user list and select Move User from the context menu.
6
In the Move User dialog box, select the appropriate new level for the new user, and select Inherit permissions defined from the new user type permission.

7
Click OK.

Configuring Screen Access

The Screen Permissions page contains a hierarchical list of all screens that appear within Cloud GMS. From this screen, you can control access to individual screens or all screens within a section. This includes permissions for users or groups to view, or view and update reports.

* 
NOTE: By default, a new user group has no privileges.
To configure screen access settings for a user or user group, complete the following steps:
1
Navigate to the Console > Management > Users configuration screen.
2
Select a user or user group under All Users.
3
Click the Screen Permissions tab.
4
Under All Screens, select a panel, section, or screen. For example, for REPORTS_PANEL, you can select the whole panel, the unit type section such as Firewall, SMA, or Email Security (ES), the group of reports for that type of unit, or the individual report or screen for which you want to set permissions.

On the right side of the pane, select from the following:

To prevent any access to the object, select None.
To allow view only access, select View Only.
To allow the user or group to make updates only for unit-level screens and not for group-level screens, select Update At Unit Level Only. This option is only available for objects in the Policies and Reports panels.
To allow the user or group to make updates at the unit level screens as well as one level up, select Update At Unit and One Level Up.
To update all levels, click Update At All Levels.
5
Click Update to apply the permission changes.
6
You might see a warning screen if you are applying permission changes to a group, verify that you wish to apply these changes to the group and all users within that group and click OK.

The panel object is now preceded by a .
 
* 
NOTE: The more specific settings override the more general settings. For example, if you select View Only for the Status group of reports and select None for the Up-Time over Time report, then the selected user only sees the Up-Time Summary report in the Status reports and have View Only permission for that report.
7
To clear all screen settings and start over, click Reset.
8
When finished, click Update.

Configuring Appliance Access

The Appliance Permissions page contains a hierarchical list of all SonicWall appliances that appear within Cloud GMS. From this screen, you can control access to SonicWall groups or individual SonicWall appliances.

To configure appliance access settings for a user, complete the following steps:
1
Open the Users configuration screen.
2
Select a user.
3
Click the Unit Permissions tab.

4
Select a View from the Views pull-down menu.
5
To provide the user with access to a SonicWall group or appliance, select a SonicWall group or appliance in the left pane of the window and move it to the right pane using the arrow. The group or appliance displays in the right pane.
6
Repeat Step 5 for each group or appliance to add.
7
To prevent the user from accessing a SonicWall group or appliance, select the group or appliance in the right pane of the window and move it to the left pane. The group or appliance is deleted from the right pane.
8
Repeat Step 7 for each group or appliance to remove.

Configuring Action Permissions

The Action Permissions tab contains a list of action and view options that can be enabled/disabled for a group or user.

To configure the action permissions, complete the following steps:
1
Navigate to the Console > Management > Users page.
2
Select the user or group.
3
Click the Action Permissions tab.

4
Select the unit actions you wish to be available for the group or user in the Units section.
 

Available Units actions

Name

Description

Add Unit, Modify Unit, Delete Unit

Add, delete, or modify the Cloud GMS management specifications of managed units.

Rename Unit

Renames the unit.

Login to Unit

Gains access to the managed unit’s interface through the Cloud GMS.

Modify Properties

Modifies the properties of the managed units.

Re-assign Agents

Moves units between the agents.

5
Select the view options you wish to be available for the group or user in the Views section:
 

Available Views options

Name

Description

Manage View

Alters the properties of views.

Change View

Change between views.

6
Select the Dashboard options for the group or user.
 

Available Dashboard options

Name

Description

Show Universal Dashboard

Makes the Universal Dashboard visible to the selected user or group.

Change Geo View

Changes the Geo view of the Dashboard map.

Modify Geo Location

Changes the location of the view on the Dashboard map.

Show Universal Scheduled Reports

Makes the Universal Scheduled Reports available to the selected user or group.

7
Select any remaining options for the group or user in the Others section:
 

Other options

Name

Description

Enable CLI

Manage using the command line interface (CLI).

Use Web Services

Configure and use the Web Services feature.

Show ‘Switch’ link

 

Can unmask reports

 

8
Click Update.

Custom Groups

The Cloud GMS uses an innovative method for organizing SonicWall appliances.

SonicWall appliances are not forced into specific, limited, rigid hierarchies. Simply create a set of fields that define criteria (for example, country, city, state) that separate SonicWall appliances. Then, create and use views to display and sort appliances on the fly.

Creating Custom Fields

When first configuring Cloud GMS, you must create custom fields that are entered for each SonicWall appliance. Cloud GMS supports up to ten custom fields.

* 
NOTE: Although SonicWall Cloud GMS supports up to ten custom fields, only seven fields can be used to sort SonicWall appliances in any view.

Cloud GMS is pre-configured with four custom fields: Country, Company, Department, and State. These fields can be modified or deleted.

To add fields, complete the following steps:
1
Click the Console tab, expand the Management tree and click Custom Groups.

2
Right-click Custom Groupings in the right pane.
3
Select Add Category from the pop-up menu.
4
Enter the category name of the first field such as Department.
5
Enter a Default Value, such as Engineering.
6
Click OK.
7
Select the newly created field and select Add Group from the pop-up menu.
8
Enter the name of the new field.
9
Repeat Steps 6 through 8 for each field that you want to create. You can create up to ten fields.
* 
NOTE: Although the fields appear to be in a hierarchical form, this has no effect on how the fields will appear within a view. To define views, see Configuring Action Permissions.

To delete fields, right-click any of the existing fields and select Delete Category from the pop-up menu.

Configuring Management Sessions

The Sessions page of the Management section of the Cloud GMS Console allows you to view session statistics for currently logged in Cloud GMS users and to end selected sessions.

Managing Sessions

On occasion, it might be necessary to log off other user sessions.

To do this, complete the following steps:
1
Click the Console tab, expand the Management tree and click Sessions. The Sessions page displays.

 
2
When more than one session is active, a check box is displayed next to each row. Select the check box of each user to log off and click End selected sessions.The selected users are logged off.

* 
NOTE: This page can accept/display IPv4 and IPv6 addresses.

Schedules and Group Schedules

The Schedules page allows you to create and manage schedules and schedule groups for enforcing schedule times.

Managing Schedule Groups

The Group Schedules table displays all your predefined and custom schedules. In the Group Schedules table, there are four default group schedules from which to choose: Daily 24x7, Weekdays 24x7, 8x5 Work Hours, and Weekend Hours.

A group schedule can include multiple day and time increments for rule enforcement with a single schedule. If a schedule includes multiple day and time entries, a right-arrow button appears next to the schedule name. Clicking the Expand icon expands the schedule to display all the day and time entries for the schedule.

You can modify these group schedules by clicking the Edit icons in the Configure column to display the Edit Schedule Group window.

Adding Schedule Groups

To create a schedule group, complete the following steps:
1
On the Console > Management > Schedules page, click Add Schedule Group. The Add Schedule Group page is displayed.

2
Enter a descriptive name for the group schedule in the Name field.
3
Enter a group schedule description in the Description field.
4
Click Visible to Non-Administrators if you would like to make the schedule viewable by the public.
5
By clicking once on the desired Schedule time descriptions, use the arrow keys to move them into the right field. These are the parameter that will be used in your schedule group range.
6
Click Update to group the entries into one named schedule.

Deleting Schedule Groups

To delete a schedule group, complete the following steps:
1
Select the check box next to the name of the group you would like to delete.

All subordinate check boxes are selected when you click the Schedule Name. Expand the group arrow if you would like to delete individual entries from the group.

2
Click Delete Schedule Group(s)/Remove Schedule(s) from Group.
3
Confirm the deletion by clicking OK on the window that appears.

Managing Schedules

The Schedules table displays all your predefined and custom schedules. In the Schedules table, there are several default schedules you can use or modify.

You can modify these schedules by clicking the Edit icons in the Configure column to display the Edit Schedule window.

Adding Schedules

To create a schedule, complete the following steps:
1
On the Console > Management > Schedules page, click Add Schedule. The Add Schedule page is displayed.

2
Enter a descriptive name for the schedule in the Name field.
3
Enter a schedule description in the Description field.
4
Click Visible to Non-Administrators if you would like to make the schedule viewable by the public.
5
Click Disable to take the schedule offline but still available for use later when activated.
6
Click Invert to
7
Select one of the following radio buttons for Schedule:
One-time occurrence – For a one-time schedule at the configured Date and Time.
Recurrence – For schedules that occur repeatedly during the same configured hours and days of the week, with no start or end date. When selected, the fields under Recurring become active, and the fields under Once become inactive.
8
For a One-time Occurrence, configure the starting date and time by entering the Month, Day, and Year (mm/dd/yyyy) and the Hour, and Minute in the fields. The time is represented in 24-hour format.
9
If the fields under Recurrence, select the check boxes for the days of the week to apply to the schedule or select All.
10
Under Recurrence, type in the time of day for the schedule to begin in the Start Time field. The time must be in 24-hour format, for example, 17:00 for 5 p.m.
11
Under Recurrence, type in the time of day for the schedule to stop in the End Time field. The time must be in 24-hour format, for example, 17:00 for 5 p.m.
12
Click Add.
13
Click Update to add the schedule to the Schedule List.

Deleting Schedules

You can delete custom schedules, but you cannot delete the default Work Hours, After Hours, or Weekend Hours schedules.

To delete individual schedule objects that you created, perform the following steps:
1
To delete existing days and times from the Schedule List, select the row and click Delete Schedule(s). Or, to delete all existing schedules, click the check box next to Name and then click Delete Schedule(s).

Inheritance Filters

The Inheritance Filters page specifies which settings are inherited from the group when adding a new SonicWall appliance. For more information about inheritance settings, see Managing Inheritance in Cloud GMS

To configure the SNMP Inheritance Filter page, complete the following steps:
1
Click the Console tab, expand the Management tree and click Inheritance Filters. The Inheritance Filter page displays.

2
To edit an existing filter, select the filter from the Select Filter list box. To specify a new filter, select New Filter from the Select Filter pull-down menu and type a name in the Filter name field.
3
Select which page settings are inherited in the Inheritance Filter Detail section.
4
Select the type of access that is available to each Cloud GMS user group from the Access for each UserType section.
5
When you are finished, click Add for a new filter or click Update for an existing filter. The settings are changed. To clear the settings and start over, click Reset.

Message of the Day

The Message of the Day page displays a message when Cloud GMS users log on to Cloud GMS.

To configure the Message of the Day page, complete the following steps:
1
Click the Console tab, expand the Management tree and click Message of the Day. The Message of the Day page displays.

2
Select all users, a user group, or an individual user.
3
Enter message text in the Message field.
4
Select whether the message text is displayed in plain text or HTML.
5
Select the start and end date of the message (default: current day).
6
When you are finished, click Update. The settings are changed.
7
Repeat this procedure for each group or user for which this message is displayed.

Managing Inheritance in Cloud GMS

Inheritance in SonicWall™ Cloud Global Management System (Cloud GMS) specifies the process by which a node’s settings can be inherited to and from unit, group and parent nodes. Previously, Cloud GMS could inherit settings down the hierarchy. This ability can be understood as “forward” inheritance. Starting in Cloud GMS 6.0, you can now also “reverse” inherit settings back up the hierarchy, from a unit or group node to its parent node. This contains the following:

Configuring Inheritance Filters

The “Inheritance Filters” screen, under Console > Management > Inheritance Filters, is used to create inheritance filters by selecting screens available under the “Inheritance Filter Detail” screen.

To create a new filter, enter a name for this filter in the “Name” field. Then check the boxes next to the screens, or screen groups, you wish to inherit. This screen is enhanced to automatically select or deselect dependent data screens, based upon the related screens chosen by you.

You must then select the appropriate “Access” for each user type: Administrators, Operators, End Users, and Guest users. These selections are made using the corresponding drop down menus.

After you have made the desired screen and access selections, click Add to finish creating the new inheritance filter. This new filter is now available in the Filter drop down menu on the Firewall > System > Tools screen.

Applying Inheritance Settings

Administrators often work to define and test policies at the appliance level, and then painstakingly attempt to replicate those policies on other appliances. Using this simple process for inheritance, you can capitalize on the valuable time spent building a unit’s well-configured firewall policies, by then seamlessly replicating those policies through the hierarchy.

1
To inherit some or all of an appliance’s settings, go to the Firewall > System > Tools screen within the Cloud GMS management interface.

2
In the left pane, click the appliance with the settings you wish to inherit.

3
Under the screen section heading, “Inherit Settings at Unit,” select either forward or reverse inheritance by clicking the respective radio button.

4
From the “Filter” drop down menu, select the inheritance filter to apply. If a desired filter is not listed and must be created, refer to Configuring Inheritance Filters

5
After the desired inheritance filter is selected, click Preview. A Preview screen opens to allow you to review the settings to be inherited. You might continue with all of the default screens selected for inheritance or select only specific screens for inheritance by checking boxes next to the desired settings.

* 
NOTE: The Preview screen footer states, “All referring objects should also be selected as part of the settings picked, to avoid any dependency errors while inheriting.” If you deselect dependent screen data, the settings will not inherit properly.
6
If you are attempting forward inheritance, you might click “Update” to proceed. If you are attempting to reverse inherit settings, an additional selection must be made at the bottom of the Preview screen. You must select either to update the chosen settings to only the target parent node, or to update the target parent node along with all unit nodes under it. After you make this selection, you can click “Update” to proceed, or “Reset” to edit previous selections.

7
If you select to update the target parent node and all unit nodes, a “Modify Task Description and Schedule” screen opens in place of the Preview screen. (This screen does not appear if you select “Update only target parent node”). If the “Modify Task Description and Schedule” screen opens, you can edit the task description in the “Description” field. You can also adjust the schedule for inheritance, or continue with the default scheduling. If you choose to edit the timing by clicking the arrow next to “Schedule,” a calendar expands allowing you to click a radio button for “Immediate” execution, or to select an alternate day and time for inheritance to occur. After completing any edits, select either “Accept” or “Cancel” to execute or cancel the scheduled inheritance, respectively.

After the inheritance operation begins, a progress bar appears, along with text stating the operation might take a few minutes, depending on the volume of data to be inherited, as shown in the following figure:

After the inheritance operation is complete, the desired settings from the unit or group node should now be updated and reflected in the parent node’s settings, as well as in the settings of all other units, if selected.

Granular Event Management

This describes how to configure and use the Granular Event Management (GEM) feature in a SonicWall™ Cloud Global Management System (Cloud GMS) environment.

This contains the following:

Granular Event Management Overview

Granular Event Management (GEM) provides a customized and controlled manner in which events are managed and alerts are created. On the Console tab, GEM allows you to systematically configure each sub-component of your alert in order for the alert to best accommodate your needs.

The GEM alert has multiple sub-components, some of which have further subcomponents. It is not necessary to configure all sub-components prior to creating an alert.

Severities: Severity is used to tag an alert as Critical, Warning, Information, or a custom severity level. You can create your own preferred severities and assign the order of importance to them from lowest to highest. When using a custom severity, you must define it before creating a threshold that uses it.
Thresholds: A threshold defines the condition that must be matched to trigger an event and send an alert. Each threshold is associated with a Severity to tag the generated alert as critical, warning, or another value. You must define a threshold prior to creating an alert that uses it.

One or more threshold elements are defined within a threshold. Each threshold element includes an Operator, a Value, and a Severity. When a value is received for an alert type, the GEM framework examines threshold elements to find a match for the specified condition. If a match is found (one or more conditions match), the threshold with the highest severity containing a matching element is used to trigger an event.
Schedules: You can use Schedules to specify the day(s) and time (intervals) in which to send an alert. You can also invert a schedule, which means that the schedule is the opposite of the time specified in it. For example:
Send an alert during weekdays only, or weekends only, or only during business hours.
Do not send an alert during a time period when the unit, network, or database are down for maintenance.
Destinations: You can use Destinations to define where the alerts are sent. The destination(s) for an alert are specified in the Add Alert or Edit Alert screen. You can specify up to five destinations for an alert, such as multiple email addresses. For example:
Send an alert to the Unit owner all the time.
Send an alert to a Cloud GMS user during business hours.
Send an alert to the admin also during non-business hours for immediate attention.
Alert types: Alert Types are pre-defined, static parameters and are not customizable. Alert types are used with threshold elements that define conditions that can trigger an event. Some example alert types are:
Unit Up-Down Alert type
VPN SA is UP-Down, Enable-Disable

You must configure three of these components in order to create alerts:

Severities - You can use the pre-defined defaults or create your own Severities.
Thresholds - You can use the pre-defined defaults or create your own thresholds.
Schedules - You can use the pre-defined defaults or create your own Schedules.

These can be configured in the Console > Events screens. After you configure these elements in Console > Events, you can also create alerts in the Firewall, SMA, and Email Security (ES) tabs.

The Super Admin (admin@LocalDomain) user is able to add a new Severity, Threshold, Schedule, Schedule Group, or Alert into any domain. Other administrative users might only create/edit objects within their own domain.

The GEM process flow is illustrated below. As you can see, you begin by configuring Severities and end with creating Alerts.

GEM process

What is Granular Event Management?

The purpose of Granular Event Management is to provide all the event handling and alerting functionality for Cloud GMS. The Cloud GMS management interface provides screens for centralized event management on the Console tab, including screens for Events > Settings, Severity, Threshold, Schedule, and Alert Settings. The Firewall, SMA, and Email Security (ES) tabs also provide an Events > Alert Settings screen where you can add, delete, enable, or configure alerts that relate to either policies or reports.

You can create or update an alert at the global, group, or unit level in Cloud GMS. At the group or global level, the alert is then applied to all units in the group or globally. Whenever you add a new unit to Cloud GMS management, the alerts set at the global level are applied to the new unit. Group level alerts are not automatically applied to the new unit, but when you update an alert at the group level, the update applies the alert to the entire group including any new units.

Benefits

Granular Event Management offers a significant improvement in control over the way different events are handled. You now have more flexibility when deciding where and when to send alerts, and you can configure event thresholds, severities, schedules, and alerts from a centralized location in the management interface rather than configuring these on a per-unit basis.

How Does Granular Event Management Work?

The Granular Event Management framework provides customized event, including email alerting on the status of specific VPN tunnels, alerting based on schedules (such as 8am to 5pm, or 24 hours a day), and alerting to specific email destinations based on severity and functionality handling. You can also configure GEM to send an alert when changes are made to a managed appliance by a local administrator through the appliance management interface rather than through Cloud GMS. This is a predefined alert available on the Policies panel. For a list of the predefined alerts, see Using Granular Event Management.

Using Granular Event Management

For convenience and usability, a number of default settings are predefined for severities, schedules, thresholds, and alerts. You can edit the predefined values to customize these settings, or you can create your own at the global, group, or unit level. To create your own, start by examining the Events screens on the Console tab and adding custom components where needed. Then continue with the Events > Alerts Settings screens in the Firewall, SMA, and Email Security (ES) tabs. The predefined defaults for the Console tab are as follows:

 

GEM Predefined Default Objects

Tab

Screens

Predefined Default Objects

Console

Events > Severities

Information

 

 

Warning

 

 

Critical

Console

Events > Thresholds

Unit WAN Status

 

 

Unit HF Status

 

 

Unit Locally Changed

 

 

VPN Tunnel Status

 

 

Capacity in Percentage

 

 

Agent Quota Reached

 

 

Monitor Bandwidth

 

 

Monitor by Percentage

 

 

Monitor by Percentage (Anti)

 

 

Monitor CPU

Console

Events > Schedule

Schedule Groups:

 

 

24x7

 

 

Weekdays 24 hours

 

 

8x5

 

 

Weekend

 

 

Schedules:

 

 

Schedule: admin

 

 

Database Backup

 

 

Monday 24 hours

 

 

Monday business hours

 

 

Tuesday 24 hours

 

 

Tuesday business hours

 

 

Wednesday 24 hours

 

 

Wednesday business hours

 

 

Thursday 24 hours

 

 

Thursday business hours

Console

Events > Alert Settings

Unit Status Report

 

 

Database Information

 

 

New Firmware Availability

 

 

Database Size Status

 

 

System Files Backed-Up Status

 

 

Disk Space Utilization Status

About Alerts

The Events > Alert Settings screens are available in the Console, Firewall, SMA, and Email Security (ES) tabs. You can create and edit alerts on these screens. In the alert settings screens, you can combine all of the previous elements (severity, threshold, and schedule) that you have configured in the Console tab.

The GEM framework provides different types of alert types for the respective areas of the Cloud GMS application:

Policies panel: Alert settings for Management
Reports panel: Alert settings for Reporting
Console tab: Alert settings for the Cloud GMS application
 

GEM Alert Types

Tab location

Available Alert Types

Console

Backed up Syslog Files

Database Information

Disk Space Utilization Status

New Firmware Availability

Unit Status Report

Reports

Bandwidth Usage (Billing Cycle)

Bandwidth Usage (Daily)

Data Usage (Billing Cycle)

Data Usage (Daily)

Events/Hits Total (Daily)

Number of Attacks (Daily)

Number of Threats (Daily)

Policies

Unit HF Status

Unit Locally Changed

Unit Status

Unit WAN Status

VPN Tunnel Status

Agent Quota Reached

Agent Unsuccessful Backups

Appliance Capacity Status

CPU Status

Offsite Capacity Status

Duplicate Alerts

Duplicate alerts are allowed in Cloud GMS. A duplicate alert uses the same alert type that is already used in an existing alert. You do not need to create a duplicate alert if you want to add to or change an existing alert. Normally, you would avoid creating a duplicate alert by editing an existing alert to add another threshold element, destination, or other component. For example, you can have two or more threshold elements in the same alert to trigger under different conditions.

At times there are benefits to creating a duplicate alert. As an example, only five destinations are allowed per alert, so a duplicate alert could include additional destinations. Or, you could create a duplicate alert that sends SNMP traps while the original alert sends email notifications. Also, if a threshold is being shared and you do not want to modify it, you can create a separate threshold and use it in a duplicate alert.

Cloud GMS displays a warning when you try to create a duplicate alert. The warning serves as a reminder in case you forget that an alert already exists using the same alert type.

* 
NOTE: Duplicate alerts use more resources from the alerting agent, but do not have a large impact on performance. You will receive two alert emails instead of one if the destinations are identical.

Configuring Granular Event Management

To set up the GEM environment after installing Cloud GMS, start with the Events screens on the Console tab. You should examine each Events screens and make any necessary configuration changes. Then you can configure alerts in the Events screens on the Policies panel and Reports panel.

See the following sections:

Configuring Events on the Console tab

To experience the benefits of GEM, you must configure alerts for important events. In the Events screens on the Console tab, you can configure the frequency of subscription expiration and task failure notifications, as well as severities, thresholds, schedules, and alerts for handling events.

See the following sections:

Configuring Event Alert Settings

In Events > Settings, you can specify the following:

Email Alert Format, such as HTML (the default), text, or text for a pager
Email Alert Frequencies and Thresholds
Enable and Disable Alerts
To configure Event Settings, complete the following steps:
1
On the Console tab, navigate to the Events > Settings screen.
2
Under Email Alert Format Preferences, select whether the email alert will be sent as HTML, Plain Text, or Plain Text (Simple). The Simple setting sends a very short email to ensure that the email is not cut off by character limits.
* 
NOTE: To assist in your decision for choosing a type of alert format, refer to Email Alert Formats on page 1030 to view the appearance of the types of Email Alert Format Preferences.

3
Click Update.

Configuring Event Severities

In the Events > Severity screen, you can create your own severity levels or use predefined severity levels. You can delete severity levels in this screen as well. Defining the severity priority can also be performed in this screen. Users with permissions to the Severity screen can create and edit these severities.

Cloud GMS supplies the following three predefined severity levels:

Information: This is the lowest severity level
Warning: This is a mid-range severity level
Critical: This is the highest severity level
To configure Event Severities, complete the following steps:
1
On the Console tab, navigate to the Events > Severity screen. On this screen, you can resequence the severities in importance by entering a severity sequence number in each field.

2
Do one of the following:
To re-order existing severities with the new sequence numbers that you entered, click Update.
To add a new severity level, click Add Severity.
3
In the Add Severity dialog box, type a name for the new severity level in the Name field.The Domain pull-down list is only available for a Super Admin.
4
Choose the color associated with this severity level by selecting a color from the Color Chooser dialog. You can see a preview of the color you selected in the Preview field.

5
Click Update.
6
In the Console > Events > Severity screen, assign the level for the new severity you created by changing the numbering in the Sequence column of the Severity table.
7
Click Update.
To edit or delete a Severity, complete the following steps:
1
To edit a Severity, click the Edit icon.

The Edit Severity pop-up window displays.

2
Configure the Severity Settings, then click Update.
3
To delete a Severity(s), select the check box(es) for the severitie(s) you wish to delete, then click Update. You can also click Delete in the Edit column, to delete a single report.
* 
NOTE: Deleting a Severity that is in use is not permitted. A warning message displays when this action is performed.

Configuring Event Thresholds

In the Events > Threshold screen, you can view existing event thresholds, enable or disable them, and configure their elements. A threshold defines the condition for which an event is triggered. Predefined thresholds have names similar to predefined Alert Types. Each threshold can contain one or more threshold elements. An element consists of an Operator, a Value, and a Severity.

The following tasks are described in this section:

Adding a Custom Threshold

To add a custom threshold, complete the following steps:
1
On the Console tab, navigate to Events > Threshold.

2
Click Add Threshold to add a new threshold.
3
In the Add Threshold dialog box, provide a name for the threshold value in the Name field.
* 
NOTE: The Domain pull-down list is only available for a Super Admin.

4
Select Visible to Non-Administrators if you want the threshold to be visible to non-administrators. If this is selected, anyone can view the threshold elements and use the threshold in customized reports.
* 
NOTE: If the Visible to Non-Administrators is unchecked, only users from the Administrator group or the threshold creator is able to view, use, edit, and delete the threshold. Whether this is selected or not, only the users from the Administrator group and the threshold creator is able to edit or delete this object.
5
Click Update.

Adding a Threshold Element

Elements are components of a threshold. You must define a threshold by defining its elements.

1
To add a threshold element to the threshold, click plus in the Configure column of the Events > Threshold screen.
2
The Add Threshold window displays.

3
In the Operator pull-down menu, select from the list of operators.

4
In the Value field, enter a value.
5
In the Description field, enter a description to override the auto-generated description.
6
In the Severity field, select a severity.
7
Disable allows you to temporarily disable the threshold without deleting it. Select Disable if you want to disable the threshold. For more information about the enabling and disabling feature, see Enabling/Disabling Thresholds and Threshold Elements.
8
Click Update.

Editing a Custom or Existing Threshold

To edit your custom or existing threshold, complete the following steps:
1
On the Events > Threshold screen, click edit in the threshold row.
2
The Edit Threshold window displays. In this window, you can edit the name of your threshold as well as allow this threshold to be visible to non-administrators. For more information on the visible to non-administrators feature, see Adding a Custom Threshold.
3
Click Update.

Editing an Threshold Element

To edit an existing element of a Threshold, complete the following steps:
1
On the Events > Threshold screen, click the Edit icon located in the Configure column in the element row.
The Edit Threshold pop-up window displays:

Some alerts created by certain Alert Types contain predefined Thresholds that might not be edited. Alert Types: Unit HF Status, Unit WAN Status, Unit Locally Changed, and Thresholds with the same name in the Console tab.

2
In the Operator field, select from the drop down menu the type of operator to apply to your threshold element.

.

3
In the Value field, enter the value for your threshold element.
4
In the Description field, enter the description for your threshold element.
5
In the Severity field, select the severity priority from the drop down menu. These are color coded for your easy reference on the Events > Threshold screen.

6
To disable the threshold element, click Disable. See Enabling/Disabling Thresholds and Threshold Elements.
7
Click Update.

Enabling/Disabling Thresholds and Threshold Elements

The GEM feature provides a Disable check box that allows you to disable or enable thresholds or individual elements within that threshold. Disabling an element or threshold rather than deleting it is beneficial because of the time invested in creating it. If it is needed again, you can simply enable it.

You can disable a threshold by disabling all its elements. You can also disable individual elements within a threshold.

To enable or disable Thresholds and/or their elements, complete the following steps:
1
On the Console tab, navigate to the Events > Threshold screen. On this screen, you are able to view existing Thresholds. You can also view existing elements within those thresholds by clicking the expand button by a threshold. You have the following two options for the enabling/disabling feature:
You can enable or disable a Threshold by disabling/enabling all the elements that exist within it.
You can enable/disable the individual elements within a Threshold.
2
To enable or disable a threshold and/or elements, click edit that is on the element level.
3
Select Disable to disable the element or de-select Disable to enable the element.

4
Click Update.
Deleting a Threshold and Threshold Elements

On the Events > Threshold screen, you can delete Thresholds and Threshold Elements. This can be done by using Delete Threshold(s)/Element(s). To view the elements within a threshold, expand the threshold. You can select which threshold or elements within that threshold to delete. If you delete a threshold, the elements within that threshold are automatically deleted as well.

To delete thresholds and threshold elements, complete the following steps:
1
On the Events > Threshold screen, optionally expand the threshold to view the individual elements.
2
To delete a threshold, click the check box to the left of the threshold name. You will see that its elements are automatically selected as well.

3
To delete an element, select only the element check box.
* 
NOTE: Deleting a Threshold that is in use is not permitted. A warning message displays when this action is performed.
4
When you have finished with your selections, click Delete Threshold(s)/Element(s).

Configuring Event Schedules

The next component on the Console tab is Events > Schedule. In this screen, you can add, delete, or configure schedules and schedule groups.

Schedule groups are one or more schedules grouped within an object. Administrators and Owners can edit these objects. Other users should be able to view or use them only if Visible to Non-Administrators is selected.

The following tasks are described in this section:

Adding an Event Schedule

In Events > Schedules you can add, delete, or configure schedules. You will see your schedules and schedule groups, their descriptions, and whether they are enabled. You can also individually delete one schedule or schedule group at a time by selecting the trash-icon on the right hand side for each row. For quick reference, you can hover your mouse over the descriptions to quickly view the type of schedule and the days and times when it is active.

To add an event schedule, complete the following steps:
1
On the Events > Schedules screen, click Add Schedule.
2
In the Name field, enter a name for the schedule.
3
In the Domain field, click the pull-down list and select a name. This function is for Super Admins only.
4
In the Description field, add a description for the schedule.
5
Select Visible to Non-Administrators if you want the schedule to be visible and usable by non-administrators.
6
To temporarily disable a schedule, select Disable.
7
Click Invert to create a schedule that is “off” during the dates and times that you specify.
8
In the Schedule field, you can create one or more schedules. For each schedule, configure either:
One Time Occurrence
Fill in the Date and Time fields.
Recurrence
Fill in Days, Start Time, and End Time fields.
9
Click Add to add this schedule to the Schedule List text box.

10
To delete an entry from the Schedule List text box, select the entry that you want to delete, and then click Delete. Click Delete All to delete all entries.
11
Click Update when you are finished.
Editing an Event Schedule

To edit an existing schedule, click the Edit icon on the right side of the Events > Schedule screen. The screen and procedure for editing are the same as those for adding a schedule. See Adding an Event Schedule.

Adding an Event Schedule Group

You can combine several schedules into a schedule group on the Events > Schedule screen.

To add a schedule group, complete the following steps:
1
On the Events > Schedule screen, click Add Schedule Group.
2
Enter the name of your schedule group in the Name field.
3
Enter a description of your schedule group in the Description field.
4
Click Visible to Non-Administrators to allow this schedule group to be viewed and used by non administrators.
5
Click Disable to temporarily disable the schedule group.
6
In the Schedules field, select the schedule(s) to add to your schedule group, and then use the arrow buttons to move the selected schedule into or out of the group. To move multiple schedule groups and/or schedules all at once, hold the CTRL button on your keyboard while making your selections.

7
Click Update.
Editing an Event Schedule Group

To edit an existing schedule group, click the Edit icon on the right side of the Events > Schedule screen. The screen and procedure for editing are the same as those for adding a event schedule group. See Adding an Event Schedule Group.

Deleting a Schedule or Schedule Group

You can delete custom schedules or schedule groups, or you can remove schedules from schedule groups. You cannot delete predefined static schedules or schedule groups. Only Administrators and Owners can delete schedules or schedule groups.

* 
NOTE: Deleting a Schedule or Schedule Group that is in use is not permitted. A warning message displays when this action is performed.

To delete an event schedule, schedule group, or remove a schedule from a schedule group:

1
Navigate to the Events > Schedule screen.
2
Click the check boxes of the schedule groups or schedules that you want deleted. When you click Schedule Group, the schedules within that schedule group are deleted as well.
3
To remove a schedule from a schedule group, click the expand button on the schedule group, and select the schedules you wish to remove within that group.
4
To delete the selected schedule group(s) or remove the selected schedules from a group, click Delete Schedule Group(s)/Remove Schedules from Group.
5
To delete the selected schedule(s), click Delete Schedule(s).

Configuring Alerts on the Console tab

The Console > Events > Alert Settings screen provides predefined alerts that apply to Cloud GMS as a whole. These are status type alerts, and do not use thresholds. You can hover your mouse over these to display information about them. You can configure the predefined alerts to use different destinations and schedules.

Add Alert

In the Add Alert panel you can enter an alert name and description, select the options for visible to non-administrators and disable, and enter the polling interval.

To add an alert, complete the following steps:
1
Navigate to the Events > Alert Settings page.

2
Click the Add Alert link.

The Add Alert screen displays.

3
Enter a name and description for your alert.
4
Enable Visible to Non-Administrators if you want your Alert to be visible to non-administrators.
5
Enable Disable to disable this Alert.
6
Enter a Polling Interval value (in seconds: 60-86400)
Alert Type

In the Alert Type panel you can select an alert type from the provided list and view the definitions of each alert type.

To configure an Alert Type, complete the following steps:
1
Click the Alert Type pull-down list and select an alert type.
* 
NOTE: When an alert type is selected, a description for that alert is displayed in the Alert Type panel.

Most of the Alert Types require you to edit content. Editing Contents allows the user to pick additional information, in a granular fashion, on which the alerting has to be performed.

2
Click the Edit Content link. The Edit Contents for Alert Type Unit Status pop-up window displays.

3
Click the Threshold pull-down list and select a threshold.
* 
NOTE: You can create a new threshold on-the-fly by clicking the icon. Only one new threshold can be created in this feature.
* 
NOTE: If you select another Alert Type before you click Update in the Add Alert dialog box, or if you click Reset, you lose the on the fly Threshold that you created and the Edit Content status becomes Not Edited.
4
Click Update. To reset the settings, click Reset.
Destination / Schedule

In the Destination / Schedule panel you can add up to 5 destinations and set a schedule for each.

To add a destination and set a schedule, complete the following steps:
* 
NOTE: Every selected destination is required to have a schedule set.
1
Click the Add Destination link under the Destination/Schedule section. The Destination field designates where you want alerts to be sent. You have a maximum number of five destinations.

2
Click the Schedule pull-down list, then select a schedule type. The Schedule field designates the frequency of when you want alerts to be sent to the destination(s).

3
Click Update to finish adding an alert.
Enabling/Disabling Alerts
To enable and disable an alert, complete the following steps:
Enabling a Alert
1
Select Enabled of the alert(s) you wish to enable.
2
Click the Enable/Disable Alert(s) link. A confirmation window displays. Click OK to enable or disable.

Disabling an Alert
1
Deselect Enabled of the alert(s) you wish to disable.
2
Click the Enable/Disable Alert(s) link. A confirmation window displays. Click OK to enable or disable.

Deleting Alerts
To delete an alert, complete the following steps:
1
Select the check box(es) of the Alert(s) you wish to delete.
2
Click the Delete Alert link. A confirmation window displays.

3
Click OK to delete.
* 
NOTE: You can also delete an alert by clicking the Delete icon under the Configure section of the alert you wish the delete.
Editing Alerts

After an alert is created, you can go back and edit it at any time.

To edit an alert, complete the following steps:
1
Click the Configure icon of the alert you wish to edit.

The Edit Alert page displays.

2
Refer to Add Alert and follow the configuration procedures to edit your existing Alert.

Viewing Current Alerts

You can view a list of current alerts on the Events > Current Alerts page of the Firewall, SMA, or Email Security (ES) tabs. Select a global view, group, or unit to view current alerts for your selection.

Sample Event Alert Reports

Examples of alert emails you will receive are shown in the following figures:

Database Healthcheck

Critical: Unit Status

Critical [Recovered]: Unit Status

Email Alert Formats

The types of alert emails are available in the following formats:

HTML
Plain Text
Plain Text (simple)

HTML Email Alert Format

Plain Text

Plain Text (simple)

 

Configuring User Settings

This chapter describes how to configure the user settings that are available in the Console tab on the User Settings > General page that provides a way to change the SonicWall™ Cloud Global Management System (Cloud GMS) administrator password, the Cloud GMS inactivity Timeout, and pagination settings.

To configure the user settings available in the Console tab of the User Settings > General page, complete the following steps:
1
Enter the existing Cloud GMS password in the Current Cloud GMS Password field.
2
Enter the new Cloud GMS password in the New Cloud GMS Password field.
3
Reenter the new password in the Confirm New Password field.
* 
NOTE: Password fields are grayed out for users on a Remote Domain.
4
The Cloud GMS Inactivity Timeout period specifies how long Cloud GMS waits before logging out an inactive user. To prevent someone from accessing the Cloud GMS UI when Cloud GMS users are away from their desks, enter an appropriate value in the Cloud GMS Inactivity Timeout field. You can disable automatic logout completely by entering a “-1” in this field. The minimum is five minutes and the maximum is 120 minutes.
5
Select a value between 10 and 100 in the Max Rows Per Screen field. This value applies only to non-reporting related paginated screens.
6
The Appliance Selection Panel options determine how devices are displayed in the far left panel. You can display only icons (the Icons option), only the name of the appliance (Text), or both icons and names (Icons and text), or use the default Cloud GMS display settings for this user (Use default). The default is Icons and Text.
7
To configure Cloud GMS to display an editable task description each time a task is generated, select Enable edit task description dialog when creating tasks.
8
To have Cloud GMS play an audio alert when an appliance goes up, check Enable Audio Alarm when a Managed Unit goes Up.
9
To have Cloud GMS play an audio alert when an appliance goes down, check Enable Audio Alarm when a Managed Unit goes Down.

To customize the audio alerts, place wav files in the following directory:

[SCloud GMS2]\Tomcat\webapps\sgms\com\sonicwall\sgms\applets\common

The file names for an appliance going up and down must be up_custom.wav and down_custom.wav respectively.

10
To view the message of the day now, click View Message of the Day.
11
When you are finished, click Update. The settings are changed. To clear all screen settings and start over, click Reset.
* 
NOTE: The maximum size of the SonicWall Cloud GMS User ID is 24 alphanumeric characters. The password is one-way hashed and any password of any length can be hashed into a fixed 32 character long internal password.

Using Cloud GMS Help

To access the SonicWall™ Cloud Global Management System (Cloud GMS) online help, click the blue Help button in the top-right corner of the Cloud GMS user interface.

The Cloud GMS online help provides context-sensitive conceptual overviews, configuration examples, and trouble shooting tips.

This chapter contains the following sections:

About Cloud GMS

The Console > Help > About page displays the version of Cloud GMS being run, who the Cloud GMS is licensed to, database information, and the serial number of the Cloud GMS.

To access the Cloud GMS online help, click the blue Help button in the top-right corner of the Cloud GMS user interface.

Tips and Tutorials

Tips and tutorials are available in some pages of the user interface, and are denoted by a “Light bulb” icon:

To access tips and tutorials:
1
Navigate to the page where you need help.
2
If available, click the Light bulb icon in the upper right-hand corner of the window. Tips, tutorials, and online help are displayed for this topic.