1. What’s New in Dimension v2.0
WatchGuard Training
©2015 WatchGuard Technologies, Inc.

2. What’s New in Dimension v2.0
New Dimension look & feel
Dimension Command
Centrally Manage your Firebox devices and FireClusters with Dimension
Managed VPNs
Visibility Enhancements & Integration
New Devices pages
New Manage Tasks menu and options
Bandwidth & Time Quotas — New log messages and reports
AP Devices — Dashboard and reports
Health Reports — Health Summary, Usage Summary, Interface Summary
Static IP Address Mapping enhancement
Device Group enhancements
Block Sites & Open Fireware Web UI in context from Executive and Security Dashboards
WatchGuard Training

3. What’s New in Dimension v2.0
Dimension Server Enhancements
Certificate Management Enhancements
notification with Postfix
System Diagnostics tool enhancements
Run Network Diagnostics with traceroute and DNS lookup
Installation & Upgrade Options
WatchGuard Training

4. Dimension — New Look & Feel
WatchGuard Training

5. New Dimension Look & Feel
New Login page
Responsive design
New navigation
New Edit Mode & View Mode
Launch Fireware Web UI from Dimension
WatchGuard Training

6. New Login Page Responsive design: renders in three different layouts
Desktop web page
Mobile device
Tablet device
WatchGuard Training

7. New Navigation Main menu can expand (+ icon) and collapse ( – icon)
WatchGuard Training

8. New Navigation
New icons for the Administration menu, Help, and Logout options.
The Administration menu and Logout icons include drop-down options.
WatchGuard Training

9. Lock & Unlock the Dimension Configuration
Dimension pages with options to edit settings include a new option to lock and unlock the Dimension configuration:
Read-Write mode is now unlocked
Read-Only mode is now locked
WatchGuard Training

10. Locked & Unlocked Modes
Affected Dimension pages:
Home > Groups
Administration >
Manage Tasks
Server Management >
Configuration
IP Address Mapping
Database > Configuration
User Management
System Settings > Configuration
WatchGuard Training

11. Look & Feel Integration with Fireware Web UI
The version of Fireware Web UI available with Fireware OS v has the same new look and feel as Dimension v2.0, for a seamless transition between Dimension and Fireware Web UI.
Both Fireware Web UI and Dimension include these changes:
New Color Palette
Updated navigation
New fonts
Updated login pages
Overall updated look and feel
WatchGuard Training

12. Dimension Command
WatchGuard Training

13. Dimension Command Overview
Dimension now includes a Command module to enable you to centrally manage your Firebox devices and FireClusters.
Dimension can be located in a private or public cloud
Simplified Firebox deployment
Device Health Statistics
Integrated Fireware Web UI for managed Firebox devices
Configuration History
Visibility Integration
Firebox requirements:
Fireware OS v or higher
Valid Support and Dimension Command feature keys
WatchGuard Training

14. Fireware Enhancements for Dimension Command
Fireware v includes a new daemon to communicate with Dimension
Multiple administrators can connect to a Firebox at the same time
Fireware OS automatically downloads OS upgrades
Embedded Fireware Web UI integration
Fireware Web UI handler for Managed VPN JSON objects
VPN Health Status Xpath
Firebox licensing requirements:
Visibility (Logging & Reporting) — Valid Support feature key (30-day grace period)
Management — Valid Dimension Command feature key (30-day grace period)
WatchGuard Training

15. Dimension Protocol Enhancements
Foundation of Dimension Management
New Fireware daemon (dxcp) and Dimension Command server
Manages remote Firebox devices
Persistent connection from Firebox devices to Dimension
Operates over HTTPS on port 443
Works behind NAT routers
No separate management tunnels
Bi-directional communication
Firebox sends health updates, log messages, etc.
Dimension sends configuration updates, etc.
WatchGuard Training

16. Dimension Server Management
Dimension is now more than a Log Server
Administration > Server Management > Configuration
General tab — Specify public address(es) and port, if Dimension is deployed behind a NAT device
Command tab — Specify revision history limits for managed device configuration files
Visibility tab — Change the Log Server encryption key
Administration > Database
Status page — Database server status (Stop/Start/Restart server); log rate chart
Configuration page — Database location and connection parameters for the external database
SSL is supported for connections to the external database
Diagnostic page — Process list and log messages for the built-in database, and Database statistics
WatchGuard Training

17. Dimension Database Connections
Required for user login and role-based administration enforcement
Only the built-in admin user account can login in when the connection goes down
The Database > Status page is the page that is available when connection goes down
WatchGuard Training

18. Role-Based Administration
New Predefined Roles
Global Administrator, Global Monitor
View All Logs, View All Reports
New Custom Roles
Device Administrator, Device Monitor
VPN Administrator, VPN Monitor
Local Groups
Assign/manage role-based policies for groups of users
Members can be local users/groups, AD users/groups
User/group accounts and role-based policies are stored in the database
Common repository for user/group accounts, role-based policies and managed devices
Shared by all instances that use the same external database
Built-in admin account remains local to each instance of Dimension
WatchGuard Training

19. Centralized Management
Add managed Firebox devices to Dimension with two methods:
Configure Dimension as the Log Server in the Firebox device configuration file
Same steps as in Dimension v1.x
Dimension is available as a Visibility tool only (review log messages and reports)
To manage the Firebox with Dimension, use the simple download and import process:
Download the .wgd management settings file from Dimension
Import the .wgd to the Firebox to enable management (Fireware OS v and higher)
Add Device Wizard
Select Home > Devices > Add to add a Firebox to Dimension for management (Dimension Command) and visibility
Specify the Firebox serial number and device name
For a FireCluster, specify the FireCluster name and members
Import the .wgd file in the Firebox Managed Device settings (Policy Manager or Fireware Web UI)
WatchGuard Training

20. Centralized Management
Management settings file (.wgd)
Created at the end of the Add Device Wizard
Used to configure the Firebox to communicate with Dimension
Contains all Dimension management and logging settings for the Firebox
Log Server Settings for the Primary and Backup WatchGuard Log Server (the Log Servers 1 settings)
To download the management settings file again, select the Firebox on the Home > Devices page and click Edit.
If the Firebox is connected to Dimension, the option to download the .wgd file is not available.
The Firebox credentials are generated each time you download the .wgd file. Do not generate a new .wgd file unless you have direct access to the Firebox to import the new .wgd file.
Import the .wgd file to the Firebox in the Managed Device settings in Policy Manager or Fireware Web UI
WatchGuard Training

21. Device Summary Page
For each Firebox and FireCluster managed by Dimension, the Device Summary page shows this health and device information:
Connection status
CPU usage
Memory usage
Uptime
Feature key status
Model, version, serial number, and IP address
Configuration History
Select Home > Devices > <Firebox or FireCluster Name>
You can also open Fireware Web UI for the Firebox or FireCluster
WatchGuard Training

22. Firebox Health Reports
Health Reports for each Firebox include:
Health Summary
At-a-glance view of CPU Usage, Memory Usage, and usage of Physical Interfaces
Links to individual usage and interface summary pages
Usage Summary
Time-based summary of CPU and memory usage
Includes a chart that you can use to zoom in on a timeframe from the summary
Interface Summary
Includes the bytes sent and received through the physical interfaces on the Firebox
Select which interface to view in the summary
Pivot the summary details by bytes, rate, or packets
WatchGuard Training

23. FireCluster Device Summary Pages
Navigate between two views:
FireCluster view
Single member View
Health information for both member devices
FireCluster Device Summary page includes links to the Device Summary page for each cluster member
WatchGuard Training

24. FireCluster Device Summary Pages
Single FireCluster member view
Shows the Device Summary page for the cluster member
Click the FireCluster name in the breadcrumbs to return to the FireCluster Device Summary page
WatchGuard Training

25. Firebox Configuration History
Dimension automatically tracks configuration changes for the Firebox devices and FireClusters it manages
All Fireware management tools are supported for configuration changes
Policy Manager
Fireware Web UI (can launch from Dimension)
CLI
From Dimension, for managed devices you can:
View the Configuration History list
Change the Configuration History list default settings — 10 revisions and 5 MB total per Firebox
Run a Diff on two configuration revisions for a Firebox
Revert to a previous revision of a configuration
WatchGuard Training

26. Fireware Web UI Connections
For managed devices, Dimension makes a proxied and tunneled connection to the Firebox to launch Fireware Web UI.
Administrator logs in to Dimension, Dimension connects to the Firebox
Single Sign-On
Administrator only logs in to Dimension
Web UI privileges are controlled by Dimension roles
Fireware Web UI can be launched from Dimension
Optionally open in separate window or tab
Full Web UI functionality
No management ports to open on a Firebox
Only available for a FireCluster cluster master
WatchGuard Training

27. Managed VPNs
WatchGuard Training

28. Managed VPNs — Create a Managed VPN
Create managed VPNs between two Firebox devices managed by Dimension
Connect to Dimension with Global Administrator or Super Administrator credentials
Select the VPNs page and run the Create VPN wizard to configure the Hub device and specify the resources for the managed VPN.
WatchGuard Training

29. Managed VPNs — Create a Managed VPN
WatchGuard Training

30. Managed VPNs — Hub Device Settings
Select a Hub device and a BOVPN type: traditional or virtual interface
Specify a name for the VPN
Select the External interface on the Hub device to use for the VPN
Add a VPN resource:
Specify an IP address for the resource on the trusted network
Select the direction: bi-directional, hub-to-spoke, spoke-to-hub
WatchGuard Training

31. Managed VPNs — Spoke Device Settings
Add one or more spoke devices to a VPN
On the Hub device page, click Add.
WatchGuard Training

32. Managed VPNs — Spoke Device Settings
Spoke Gateway device settings:
Select the spoke device
Select the spoke device external interface to use for the VPN
Add a VPN resource:
Specify an IP address for the resource on the trusted network
(Optional) Specify a tunnel mode
Add VPN Options
Select the Firewall Policies from the spoke device configuration to use in the VPN tunnel
WatchGuard Training

33. Visibility Integration
WatchGuard Training

34. Visibility Integration
The Executive Dashboard page shows information about your network usage and possible problems in your Firebox configuration
Take actions on the available information for each item:
From the Executive Dashboard page widgets, select an item in a widget to see information on that item
Filter the widget list on the selected item
Add a site to the Blocked Sites List
Open Fireware Web UI to configure settings for the item
WatchGuard Training

35. Visibility Integration
WatchGuard Training

36. Open Fireware Web UI from Dimension
You can now open Fireware Web UI for a single device that is managed by Dimension directly from Dimension.
On the Device Summary page for a managed Firebox, select Actions > Open Fireware Web UI or Open Fireware Web UI in a New Tab
WatchGuard Training

37. Devices Page Enhancements
WatchGuard Training

38. Devices Page Enhancements
The Home > Devices page now includes these pages:
List — A list of all Firebox devices and FireCluster connected to Dimension for Management or Visibility.
Health — CPU and Memory usage, Uptime, and Feature Key information for the connected devices.
License — Current feature key information for the connected devices.
Map — Location on a world map of each connected device.
WatchGuard Training

39. Devices List Page
On the List page, you can see the status of the connected Firebox devices and FireClusters, and add, edit, or remove devices from Dimension.
WatchGuard Training

40. Devices List Page Logging and Management status Click Add Click Edit
Yes — The Firebox has been added to Dimension and is connected to Dimension
No — The Firebox has been added to Dimension, but is not connected
Backup — The Firebox is the FireCluster backup master (Management column only)
Disabled — The Firebox has been added to Dimension, but is not connected and is not communicating with Dimension
Click Add
Start the Add Device Wizard
Click Edit
Add the Latitude and Longitude for the Firebox
Regenerate the .wgd file for the Firebox
WatchGuard Training

41. Devices Health Page View devices based on health statistics
Find devices under heavy load
Find devices that have restarted recently
CPU Usage (Percentage)
Memory Usage (Percentage)
Firebox Uptime
Feature Key status
WatchGuard Training

42. Devices License Page Shows the status of feature keys for each Firebox
Columns are blank for Firebox devices that do not have a feature key for a service
Columns are color-coded:
Feature key expires in < 90 days
Feature key expires in < 30 days
Feature key has expired
WatchGuard Training

43. Devices Map Page
The Map View shows the location on the globe of all your Firebox devices
Automatically uses Geo Location based on the Firebox IP address
(Option) Specify the latitude and longitude of your Firebox
Improve Precision
Private IP addresses
Firebox Health Statistics
Statistics appear when you hover over a Firebox, or click or touch the Firebox icon
The map summary includes a hyperlink to the Device Summary page for the selected Firebox
WatchGuard Training

44. Manage Tasks
WatchGuard Training

45. Manage Tasks
The new Manage Tasks page includes the Schedule Reports option from previous versions of Dimension, as well as new tasks.
Select Administration > Manage Tasks
On the Manage Tasks page, you can schedule and review these tasks:
Scheduled Reports
Back up and restore log messages to the Dimension Log Server database
See the status of currently active tasks
Allow users to select the report start time for recurring reports
Schedule a report to run immediately
Schedule a one-time task to back up log messages
Schedule a one-time task to restore log messages
Cancel a running task
Restart a failed task
See the status of a task
WatchGuard Training

46. Manage Tasks
Examples of the Manage Tasks page
WatchGuard Training

47. Manage Tasks — Schedule Reports
Schedule a report to run immediately
WatchGuard Training

48. Manage Tasks — Schedule Reports
Select a start time for Scheduled Reports
Reports are generated on or after the start time you specify, but not before
WatchGuard Training

49. Manage Tasks — Back Up Historical Data
Schedule a task to back up the historical data in your Dimension server database
Historical data is backed up to the Remote Backup location you specify in the Remote Backup settings.
Historical data includes the device information records, log messages, summary report data, and device health statistics from your Firebox devices, FireClusters, and servers that are connected to Dimension, and managed VPN statistics
WatchGuard Training

50. Manage Tasks — Restore Historical Data
Schedule a task to restore historical data to the Dimension server database
WatchGuard Training

51. Manage Tasks — Review Task Status
See the status of a task
Click the Name column for a task to open the Schedule Task dialog box for the task and see the status of the task
WatchGuard Training

52. Manage Tasks — Cancel a Task
Cancel a running task
WatchGuard Training

53. Manage Tasks — Restart a Task
Restart a failed task
Select a failed task.
Click Edit and select Restart.
WatchGuard Training

54. Bandwidth & Time Quotas
WatchGuard Training

55. Bandwidth & Time Quotas
You can enable bandwidth and time usage quotas for users on your network for access to external sites.
Apply a daily limit to user Internet usage to enforce corporate acceptable use policies.
When users exceed the quota limit, a notification message appears in their web browsers and further access attempts are denied.
WatchGuard Training

56. Bandwidth & Time Quotas
Enable time and bandwidth quotas
Add a quota rule that defines applicable users and groups, and the quota action to apply.
WatchGuard Training

57. Bandwidth & Time Quotas
You can set these types of quotas:
Bandwidth — The bandwidth quota is set in MB per day, and is enforced for all TCP and UDP traffic in both directions.
Time — The time quota is set in minutes per day.
Both bandwidth and time quotas can be enabled at the same time, and the limit that is reached first is enforced.
WatchGuard Training

58. Bandwidth & Time Quotas
Quota limits are applied to users and groups based on authentication to the Firebox.
For a quota to take effect, a user must be authenticated and match a configured policy defined with Firebox users and groups.
WatchGuard Training

59. Bandwidth & Time Quotas — Log Messages & Reports
Log Manager
Traffic tab shows the log messages for traffic denied when a bandwidth or time quota is reached
WatchGuard Training

60. Bandwidth & Time Quotas — Log Messages & Reports
Log Manager
Event tab shows the details of the event log messages for traffic denied when a bandwidth or time quota is reached
WatchGuard Training

61. Bandwidth & Time Quotas — Log Messages & Reports
Bandwidth & Time Quota Reports
A Device Quota report is available in both the Device and Detail report sections
WatchGuard Training

62. Bandwidth & Time Quotas — Log Messages & Reports
Authentication report now includes a Quota Usage column
The Quota Usage column only appears if the log messages include quota limit data.
WatchGuard Training

63. Bandwidth & Time Quotas — Log Messages & Reports
Denied Quota Detail report — Action column includes quota details
WatchGuard Training

64. Bandwidth & Time Quotas — Schedule Reports
Manage Tasks > Schedule Reports > Report Selection
Report Type > Exceptions
Denied Quota Summary report — Includes a summary and detail report of all connections denied because of quota rules
WatchGuard Training

65. Bandwidth & Time Quotas — Dashboard
Dashboard > Policy Map
Denied traffic log messages for quotas are included in only the Policy Audit pivot view
Only the Connections option is available
WatchGuard Training

66. AP Devices Dashboard & Reports
WatchGuard Training

67. AP Devices Dashboard & Reports
New Reports for WatchGuard AP devices.
When your Firebox has an AP device connected to it, and you have selected to send log messages to Dimension for that Firebox and the connected AP devices, a new section of reports appears in Dimension: AP Devices
The reports in the AP Devices list include:
AP Devices
AP Device Usage
SSID Usage
WatchGuard Training

68. AP Devices Dashboard & Reports
Pivot Options for each report include:
AP Device Reports
Pivots
AP Devices
Average Client
Max Client
Average Rate
Max Rate
AP Device Usage
Clients
Bytes
SSID Usage
WatchGuard Training

69. Health Reports
WatchGuard Training

70. Health Reports
Health reports include statistics about the health of your connected Firebox devices.
Dimension includes these Health reports:
Health Summary
Usage Summary
Interface Summary
Health reports can be viewed and downloaded as a PDF file, or scheduled for delivery.
WatchGuard Training

71. Report Enhancements
WatchGuard Training

72. Report Enhancements Pivot to a detail report from a summary report
DLP report enhancements
Custom report template enhancement
Report generation improvements
WatchGuard Training

73. Report Enhancements — Pivot to Detail Reports
From many Summary reports, you can now pivot to a Detail report
All Summary reports that have a corresponding Detail report include a View Details link at the top-right corner of the report.
To open the Detail report page, click the View Details link.
WatchGuard Training

74. Report Enhancements — Pivot to Detail Reports
You can pivot to a Detail report from these Summary reports:
Alarms
Denied Packets
POP3
SMTP
DLP
Web Audit
IPS
GAV
APT
Undetected APT
WebBlocker
WatchGuard Training

75. Reports Enhancements — DLP
The DLP Per Client Summary report now includes the policy name
Include the Policy Name as a report generation parameter
Search and filter a report on the Policy Name
Search and filter parameters return any results that include the text you specify for the Policy Name. Parameters do not have to be an exact match.
Example: A search for ftp returns results with the FTP-proxy, FTP-proxy-00, and FTP policy names.
WatchGuard Training

76. Custom Report Template Enhancements
Custom Report Templates now include an option to select a page size for PDF reports
Select Server Management > Configuration > Reporting > Custom Report Templates
Add a Custom Template and select a Paper Size.
Default option is Letter (8.5”x11”)
WatchGuard Training

77. Static IP Address Mapping
WatchGuard Training

78. Static IP Address Mapping Enhancements
On the Server Management > IP Address Mapping page, Static IP Address Map section, you can now select to view the Global Map with all static mappings, or a Device Map for a single Firebox device, device group, or FireCluster.
Device Map:
Search for a device, group, or cluster by name or serial number
Export each map in a single CSV file
WatchGuard Training

79. Static IP Address Mapping Enhancements
Global Map:
Import static IP address/name pair mappings from a CSV file
Export the mappings in the Global Map to a CSV file
Search the Global Map for a Firebox, group, or cluster
WatchGuard Training

80. Device Group Enhancements
WatchGuard Training

81. Device Group Enhancements
Device Group enhancements include:
Log Manager and Log Search options are now supported for Groups
Report generation improvements
WatchGuard Training

82. Log Manager & Log Search Support for Groups
When you view a device group, you can now use Log Manager and Log Search to see and search for log messages for all Firebox devices in the group.
Log messages are aggregated for all device in the group when the database query runs, similar to how log messages for FireClusters are presented.
WatchGuard Training

83. Log Manager & Log Search Support for Groups
Groups page > Select a group
WatchGuard Training

84. Log Manager & Log Search Support for Groups
Select Log Manager. All log messages for the devices in the selected group appear.
WatchGuard Training

85. Log Manager & Log Search Support for Groups
In the Search text box, type the text to search on. Or, select Log Search and run the search. The log messages that match the search parameters for all the devices in the group appear.
WatchGuard Training

86. Group Report Generation Enhancements
Previously, group reports, except Dashboard reports, were individually generated for each Firebox in the group and then aggregated into one report
Report data is now aggregated when the database is queried, and then one report is generated
Group reports include:
Compliance
Detail
Device
Mail
Per-Client
Services
Traffic
Web
WatchGuard Training

87. Dimension Server Enhancements
WatchGuard Training

88. Dimension Server Enhancements
Dimension web server certificate enhancements
Generate, import, and download a CSR
notifications with Postfix
Postfix used to send notifications from Dimension
Full diagnostics available in Dimension to monitor and manage Postfix
WatchGuard Training

89. Web Server Certificate Enhancements
CSR generation
Available for download until a signed certificate is imported
Wildcards supported in Subject Alternative Names
UTF-8 encoding used for Subject Name components
CSR does not have to be generated on Dimension
The private key must be imported with the certificate and any necessary intermediate CA certificates
Only PFX archive format is supported for import
WatchGuard Training

90. Web Server Certificate — Generate & Import a CSR
Import a Web Server Certificate
Select Administration > System Settings > Import
Select a PFX File or a PEM Certificate
WatchGuard Training

91. Web Server Certificate — Generate & Download a CSR
In the Certificate Management section, click Generate, specify the details for the CSR, and click Generate.
After the CSR is generated, click Download to retrieve the CSR.
WatchGuard Training

92. Email Notifications with Postfix
About Postfix
Postfix is a mail transfer agent that routes and delivers .
It is widely used and is the basis of the XCS product.
In Dimension it is exclusively used to send (as an SMTP client). No server functionality is used.
Uses stock packages from Ubuntu
Full documentation can be found at
Postfix in Dimension
Postfix replaces the Python smtplib module for delivery of notifications.
The current Python modules loses the notification if the module cannot connect to the STMP server.
Postfix provides a mail queue for delivery of . If the first delivery attempt fails, Postfix tries again until it is successfully delivered.
WatchGuard Training

93. Postfix in Email Diagnostics
On the Administration > System Settings > Diagnostics > page, you can review the diagnostic details for the Dimension system.
WatchGuard Training

94. Postfix in Email Diagnostics
Status
Status — Shows if the Postfix mail system is running
Queue — Shows the number of messages currently in the queue
Flush Queue — Click to try to deliver all messages in the queue
Purge Queue — Click to delete all messages in the queue
Diagnostics
Test — Click to send a test with the current settings
The test function is not interactive: if the is undeliverable, it is placed in the queue
Log Messages
Shows the log messages in lines from /var/log/mail.log
You can specify how many lines from the mail.log file to show
WatchGuard Training

95. System Diagnostics Tool Enhancements
Dimension 2.0
March 2015
Dexter Tan
WatchGuard Training

96. Network Diagnostics
To use the new Network Diagnostics tools, select Administration > System Settings > Diagnostics
In addition to the Ping utility, you can now run these new utilities:
Traceroute
UDP (default)
ICMP
DNS Lookup
A — Address (default)
MX — Mail Exchanger
ANY — All records
NS — Name Server
SOA — Start of Authority
HINFO — Host Information
TXT — Text
SRV — Service record
AAAA — IPv6 Address
PTR — Reverse DNS lookup
WatchGuard Training

97. Network Diagnostics
The new Network Diagnostics section replaces the Ping section
From the Utility drop-down list, select the diagnostic utility to run:
Ping
Traceroute
DNS Lookup
WatchGuard Training

98. Network Diagnostics — Traceroute Utility
Traceroute utility options:
Select a Protocol:
UDP
ICMP
Specify an IP address or host name
Traceroute supports only IPv4 addresses. IPv6 addresses are not supported in Dimension.
WatchGuard Training

99. Traceroute Command Examples
traceroute –M icmp yahoo.com
traceroute to yahoo.com ( ), 64 hops max
ms ms ms
ms ms ms
ms ms ms
ms ms ms
ms ms ms
ms ms ms
ms ms ms
8 * * *
ms ms ms
ms ms ms
ms ms ms
ms ms ms
ms ms ms
ms ms ms
ms ms ms
ms ms ms
WatchGuard Training

100. Traceroute Command Examples
traceroute –M udp yahoo.com
traceroute to yahoo.com ( ), 64 hops max
ms ms ms
2 * * *
3 * * *
4 …..
64 * * *
 traceroute godxil.com
traceroute: unknown host
WatchGuard Training

101. Network Diagnostics — DNS Lookup Utility
DNS Lookup utility options:
Select a Query Type:
Specify an IP address or host name
The DNS Lookup utility now uses the host command
ISC is deprecating the previously used nslookup command and encourages the use of dig/host.
Host provides the ANSWER section of the dig command, which makes it easier to understand the lookup result. A
SOA
AAAA
AANY
HINFO
PTR MX
TXT NS
SRV
WatchGuard Training

102. Host Command Examples host -t ANY google.com
google.com has address
google.com has address
google.com has address
google.com has address
google.com has address
google.com has address
google.com has address
google.com has address
google.com has address
google.com name server ns4.google.com.
google.com has SOA record ns1.google.com. dns-admin.google.com
google.com mail is handled by 20 alt1.aspmx.l.google.com.
google.com mail is handled by 50 alt4.aspmx.l.google.com.
google.com mail is handled by 30 alt2.aspmx.l.google.com.
google.com mail is handled by 40 alt3.aspmx.l.google.com.
google.com mail is handled by 10 aspmx.l.google.com.
google.com descriptive text "v=spf1 include:_spf.google.com ip4: /31 ip4: /31 ~all"
host OR host –t PTR
in-addr.arpa domain name pointer google-public-dns-a.google.com.
WatchGuard Training

103. Host Command Examples host -t A google.com
google.com has address
google.com has address
host -t MX google.com
google.com mail is handled by 30 alt2.aspmx.l.google.com.
google.com mail is handled by 20 alt1.aspmx.l.google.com.
google.com mail is handled by 10 aspmx.l.google.com.
google.com mail is handled by 50 alt4.aspmx.l.google.com.
google.com mail is handled by 40 alt3.aspmx.l.google.com.
host –t SOA google.com
google.com has SOA record ns1.google.com. dns-admin.google.com
host –t A godxil.com
host godxil.com not found: 3(NXDOMAIN)
host -t SRV _sip._udp.sip.voice.google.com
_sip._udp.sip.voice.google.com has SRV record sip-anycast-1.voice.google.com.
_sip._udp.sip.voice.google.com has SRV record sip-anycast-2.voice.google.com.
WatchGuard Training

104. Installation & Upgrades
WatchGuard Training

105. Install or Upgrade to Dimension v2.0
You can install a new instance of Dimension v2.0, or upgrade your v1.x instance of Dimension to v2.0
New deployments use the OVA, VHD, or AMI installation files
Upgrade from Dimension v1.x with the _apt.tgz file
See the Release Notes for important upgrade instructions.
Database schema upgrade
New modular design and implementation
Runs during the post-installation phase of the upgrade, before services are started
Migrates locally stored user accounts and role-based policies into the database
Built-in admin account remains local to each instance
New Setup Wizard options
(Optional) Specify public FQDN or IP addresses and port
(Optional) External Log Server database
IP address settings are applied immediately
WatchGuard Training

106. Thank You!
WatchGuard Training