Verifying And Troubleshooting Web Application Firewall - Dell SMA 200 Administration Manual

Verifying and Troubleshooting Web
Application Firewall
One way to verify the correct configuration of Web Application Firewall is by viewing the Web Application
Firewall > Monitoring page. This page displays statistics and graphs for detected/prevented threats over time
and top 10 threats. The Local tab also displays Web server status statistics and graphs of the number of
requests and the amount of traffic during the selected monitoring period. With normal use and exposure to the
Internet, you should begin to see statistics within a day of activation.
You can also find helpful information in both the Log > View page and Web Application Firewall > Log page.
This section lists some of the relevant log messages and provides an explanation or suggestions for actions in
those cases.
Log > View Messages
The following messages can be viewed from the Log > View page:
• License Manager SSL connection failed - Restarting the appliance could be necessary
Test the connectivity to licensemanager.sonicwall.com from the System > Diagnostics page using the
Ping and DNS Lookup diagnostic utilities to ensure that there is connectivity to the backend server.
• License Manager Failed to resolve host. Check DNS.
Test the connectivity to licensemanager.sonicwall.com from the System > Diagnostics page using the
Ping and DNS Lookup diagnostic utilities to ensure that there is connectivity to the backend server.
• License Manager Peer Identity failed - Check certs and time
The License Manager server or the signature database server might not have a valid SSL Certificate.
• License Manager Reset called
The device licenses have been reset. Navigate to the System > Licenses page to activate, upgrade or
renew licenses.
Web Application Firewall > Log and Log > View Messages
The following messages can be viewed from the Web Application Firewall > Log page and the Log > View page:
• WAF signature database update failed: No signatures were found in the update
The download for the database update completed, but no suitable signatures were found in the
database.
• WAF signature database update failed: Old signature timestamp found in the update
The timestamp found in the database update from the License Manager is older than what was originally
advertised before the download for the update started.
• WAF signature database update failed: Error occurred while processing the update
There was a general error in downloading and processing the database update. This is possible if the
data in the update does not conform to the signature parser schema.
• WAF signature database update failed: Error occurred while downloading the WAF signature database
update
There was a general error in downloading and processing the database update. This is possible if the
data in the update does not conform to the signature parser schema.
• WAF signature database update was downloaded successfully. The new database contains <num> rules
Dell SonicWALL Secure Mobile Access 8.5
Administration Guide
318