User guide

WATCHGUARD SYSTEM MANAGER AND FIREWARE WSM/FIREWARE 10.2.7
and complete the Send email from text box before any email notification messages can be
sent from the server.
 The Management Server, Report Server, Log Server, and Quarantine Server share the same
administrative password. If you restore a back up configuration to the Management Server, the
administrative password changes for all servers.
[22381]
 After you change the Master Encryption Key, all WatchGuard servers must be stopped and
restarted.
[27416]
 Servers that are stopped will restart after the computer on which the server software is installed
reboots.
[2752]
Workaround
Use the Windows Services applet (Start > Programs > Administrative Tools > Services) to
set the Startup Type for the appropriate service to "Manual" if you do not want the service
to start automatically on when the computer starts.
Quarantine Server
 Quarantine Server does not start if the logging directory is set to a non-existent directory. [23540]
Logging / Log Server
 Maximum Database size setting is for threshold notification only. This setting does not limit
the disk space used by the Log Server database.
[27338]
 The tool to convert log files from WFS 7.x format to XML is no longer included in WSM v10.x,
because it is not needed in the v10.x logging/reporting systems. The new systems can create
log files and reports for Fireboxes installed with WFS appliance software.
 If you install the Log Server on a computer running Windows 2000, you must install Windows
Installer 3.1 and Service Pack 4 or the Log Server does not start.
[24169]
Reporting/ Report Server
 When you create a group of more than 10 Firebox devices for combined reports, the Most
Popular Domain report can have incorrect byte totals.
[23838]
 When your Report Server is configured to send log messages to the Log Server, and both
servers are on the same computer, the Boxes Under Management report appears in the list of
Report Server reports instead of in the list of Management Server reports.
[23834]
 When you cancel a “load report” operation in Report Manager it can take a very long time to
stop.
[22887]
 The Denied Packets Summary report shows a mismatch between the reported number of
records processed and the total number of attempts denied in the summary. The last device to
have packets denied is not shown on the report.
[23805]
 The WSM Device Manager sends a log message with the time that it inserted a device in UTC
format (YYYY-MM-DDTHH:MM:SSZ). This is incorrectly presented as the local time of the
Report Server. The UTC information is stripped, but the timestamp is not converted to local
time.
[23822]
 If you do not have your email client configured before you try to email a report from Report
Manager, the email is not sent and a Java exception pops up on your screen indicating that
Report Manager could not log in to the email client.
[23774]
 We have made many improvements to reporting in the v10.x release. However, if you prefer to
use the legacy Historical Reports tool available in previous releases of WSM, you must
RELEASE NOTES JANUARY 22, 2009 PAGE 7