Integrate On-Prem Analytics with NSM

On-prem NSM integrates with SonicWall On-prem Analytics to provide integrated user interface to manage firewall policy and monitor network traffic. On-prem NSM can be integrated with SonicWall IPFIX or Syslog based analytics. After integration of on-prem NSM and on-prem analytics, data collected by the SonicWall analytics is available within NSM user interface. To integrate on-prem NSM and analytics requires specifying detail of analytics system in NSM, then enabling firewall to view analytic data and accessing firewall analytic data

Before proceeding with NSM integration, ensure that desired SonicWall Analytics is working fine and firewall is configured to send data to analytics.

 

• Integrate SonicWall Analytics in NSM
• Enable Analytics While Adding a New Device
• Enable Firewall to View Analytics Data
• Accessing Analytics Data

Integrate SonicWall Analytics in NSM

To add On-Prem Analytics details in NSM

1. Access NSM using IP address.

   Login with username and password.

2. Navigate to Manager View | System > Settings > External Analytics.
3. Click the Add icon.
4. Enter the Name of the analytics agent

5. Select Type of Analytics Install from the drop down.

   You can select Flow Analytics for Analytics On-Prem IPFIX and Syslog Analytics for Analytics On-Prem Syslog.

6. Enter the login details of the analytics agent.

   

7. Click Save.

Enable Analytics While Adding a New Device

To add an Analytics agent while adding a new device

1. Navigate to Manager View | Home > Firewalls > Inventory page.

2. Click on Add.
3. Add the new device information.
4. Under GMS/Analytics 2.5 Integration, enable the Enable View External Reports.

5. Select the added analytics agent from the GMS/Analytics 2.5 Agent drop-down menu.

   

6. Click Save.

   For more information, refer to Adding a Device.

Enable Firewall to View Analytics Data

To add an analytics agent for zero-touch enabled or already added device in NSM

1. Navigate to Manager View | Home > Firewalls > Inventory page.

2. Select the firewall on which Analytics is running and click the Ellipses icon below Action column and click on Edit Settings.

   

3. Under GMS/Analytics 2.5 Integration, enable the Enable View External Reports.

4. Select the added analytics agent from the GMS/Analytics 2.5 Agent drop-down menu.

5. Click Save.

Accessing Analytics Data

To access analytics data in NSM:

1. Navigate to Manager View | Home > Firewalls > Inventory page.

2. Click on the firewall which you have integrated with either IPFIX or Syslog to view that particular Firewall View.

    

   • Make sure that syslog Port is set to 514 on the firewall in the Firewall View | Device > Log > Syslog > Syslog Servers tab.

   • Make sure that port 514 is not blocked by the firewall or any security policies.

   

3. Navigate to the Monitor View to see the various analytics data as per the tabs on the left of the page.

   • IPFIX

     

   • Syslog