What’s New in WatchGuard
XCS v9.1 Update 1
WatchGuard XCS v9.1 Update 1
 Enhancements that improve ease of use
•
New Dashboard items

WatchGuard Training
Mail Summary > Mail Security
• Indicates status of each mail security service
• Security Connection, Kaspersky Anti-Virus, Anti-Spam, Reputation
Enabled Defense (also displays Brightmail and McAfee if licensed)
• Yellow (Attention) or Red (Urgent) means a service cannot be
contacted or Anti-Virus definitions are out-of-date
2
WatchGuard XCS v9.1 Update 1
 Enhancements that improve ease of use
•
New Dashboard items

WatchGuard Training
Web Summary > Web Traffic > Web Security
• Indicates status of each web security service
• Security Connection, Kaspersky Anti-Virus, Reputation Enabled
Defense, and URL Categorization)
• Yellow (Attention) or Red (Urgent) means a service cannot be
contacted or Anti-Virus/URL category definitions are out-of-date
3
WatchGuard XCS v9.1 Update 1
 Enhancements that improve ease of use
•
New Dashboard items

WatchGuard Training
Mail Summary > Mail Resources
• New graph of mail activity trends
4
WatchGuard XCS v9.1 Update 1
 Enhancements that improve ease of use
•
•
New Dashboard items
System Summary information originally located on the Status & Utility page
is now incorporated into the Dashboard
 System (Version, Uptime, Licensee, Admin & WebMail Users)
 Hardware (Appliance model, CPU, Memory, Disk Usage, RAID Status,
Swap Space)
Click to expand or collapse each item
WatchGuard Training
5
WatchGuard XCS v9.1 Update 1
•
System Summary Dashboard page (continued)

System Activity (CPU Load, Swap Space)
 Servers (DNS and NTP server status)
WatchGuard Training
6
WatchGuard XCS v9.1 Update 1
•
Status & Utility Menu change
 Activity > Status > Status & Utility is now Activity > Status > Utilities
 System status and configuration info moved to the Dashboard
 Contains messaging controls and diagnostics
9.1 Update 1
Activity > Status > Utilities
WatchGuard Training
7
WatchGuard XCS v9.1 Update 1
 Enhancements that improve ease of use
•
Anti-Spam page
 Accessed through Security > Anti-Spam > Anti-Spam
 You can more efficiently manage your Anti-Spam settings
 The initial view provides access to the most common Anti-Spam
options available for configuration
 To view advanced Intercept settings, click the Show Advanced
Options link
WatchGuard Training
8
WatchGuard XCS v9.1 Update 1
WatchGuard Training
9
WatchGuard XCS v9.1 Update 1
 Enhancements that improve ease of use
•
Pattern Filters page
 Improved to help you efficiently create and manage large lists of Pattern
Filters
 Pattern Filter lists are paginated
 You can now sort the list of Pattern Filters and use search parameters to
filter the list display
WatchGuard Training
10
WatchGuard XCS v9.1 Update 1
 Enhancements that improve ease of use

WatchGuard Training
The Pattern Filters Preferences page has been moved to Security >
Content Control > Custom Actions to allow you to create custom
actions for the Pattern Filters and Content Rules features
11
WatchGuard XCS v9.1 Update 1
 Additional functionality to make an already significant XCS
solution even more powerful
•
Improved Anti-Spam Analysis and Training
 Token Analysis feature enhanced to protect against new spam
obfuscation techniques and improve spam training
 Improved tokenization of URLs for the URL Block List feature
 Improved tokenization of HTML messages to prevent the
generation of tokens for non-visible elements of a message
WatchGuard Training
12
WatchGuard XCS v9.1 Update 1
 RTF Spam Analysis
•
•
Scans and analyzes RTF (Rich Text Format) attachments for characteristics
of spam
Enabled by default in Security > Anti-Spam > Token Analysis > Advanced
WatchGuard Training
13
WatchGuard XCS v9.1 Update 1
 Reputation Whitelist
•
•
•
Advanced Token Analysis training feature
Provides additional legitimate mail training based on Reputation Enabled
Defense whitelists of hosts that are known to send legitimate mail
Enabled by default in Security > Anti-Spam > Token Analysis > Advanced
WatchGuard Training
14
WatchGuard XCS v9.1 Update 1
 Configure Advanced Intercept Settings Automatically
•
•
Allows WatchGuard to automatically configure advanced Intercept
settings (requires Security Connection)
Automatically configures these advanced settings:
 Intercept Component Weights
 Reputation/UBL/DNSBL domains and timeout settings
 Advanced Token Analysis options
•
•
•
•
•
•
•
•
•
WatchGuard Training
Enable Image Analysis
Enable PDF Analysis
Analyze PDF text
Analyze PDF images
Enable RTF Analysis
Legitimate mail and Spam training sources
Legitimate mail and Spam limits and thresholds
Dictionary spam count
Reputation Whitelist
15
WatchGuard XCS v9.1 Update 1
 Configure Intercept Settings Automatically (continued)
•
Disabled by default and configured in Security > Anti-Spam > Anti-Spam, or
Security > Anti-Spam > Intercept Settings
WatchGuard Training
16
WatchGuard XCS v9.1 Update 1
 Additional XCS v9.1 Update 1 enhancements
•
Reputation Classification Statistics in Web Analysis Report
 The Web Analysis report now includes a section for Reputation
Enabled Defense (RED) Traffic Classification
 Indicates the number of web sites with good, neutral, and bad
reputations
WatchGuard Training
17
WatchGuard XCS v9.1 Update 1
 Additional XCS v9.1 Update 1 enhancements
•
Web Reputation Lookup Moved
 The Web Reputation Lookup utility has been moved from the Web
Reputation page to the Utilities page located in Activity > Status >
Utilities.
 Use the Web Reputation Lookup utility to examine the reputation score of
specific web domains.
 Only appears if Web Reputation is enabled
WatchGuard Training
18
WatchGuard XCS v9.1 Update 1
 Additional XCS v9.1 Update 1 enhancements
•
•
Deferred Mail Queue Monitoring
 Allows you to set a threshold for monitoring the deferred mail queue and
generate a critical alarm if the threshold is exceeded
 Configured on the Configuration > Mail > Access page
Alarms for Incoming Mail Queue Monitoring


WatchGuard Training
New system alarms alert you of minor (warning), medium (serious), and significant
(critical) Queue Monitoring events
Incoming Mail Queue Monitoring is configured on the Configuration > Mail >
Access page and allows you to adjust the processing behavior on incoming mail
connections depending on the current state of the incoming mail queue
19
Introducing WatchGuard XCS v9.1
 Additional XCS v9.1 Update 1 enhancements
•
•
Symantec Brightmail™ Anti-Spam Upgrade
 Upgraded to version 6.2 to provide improved protection against the latest
types of spam messages
 Brightmail is an add-on subscription for customers who want to enable
multi-layered Anti-Spam engines
 Brightmail configuration options do not appear on the WatchGuard XCS
menu unless it is licensed
McAfee® Anti-Virus Option Patch
 The McAfee Anti-Virus option no longer requires an installation patch
 McAfee Anti-Virus is an add-on subscription for customers who want to
enable multi-layered Anti-Virus protection
 McAfee configuration options do not appear on the Anti-Virus page
unless it is licensed
WatchGuard Training
20
Install XCS v9.1 Update 1
Install XCS v9.1 Update 1
 If enabled, Security Connection automatically downloads update
releases
•
•
Install the update in Administration > Software Updates > Updates
The update appears in the Available Updates section
•
•
Select the update, then click Install
The device restarts
This process can take up to 10 minutes to complete!
WatchGuard Training
22
Install XCS v9.1 Update 1
 You can also download the update software from the LiveSecurity site
•
From the Software Downloads page, download the XCS v9.1 Update 1
software [xcs91_update1.pf] to your local computer
Click to download
WatchGuard Training
23
Install XCS v9.1 Update 1
 Upload the software update in Administration > Software Updates >
Updates
•
•
Click Browse to find the downloaded file on your computer
Click Upload
WatchGuard Training
24
Install XCS v9.1 Update 1
 The update appears in the Available Updates section
 Select the update, then click Install
 The device restarts
This process can take up to 10 minutes to complete!
WatchGuard Training
25
Thank You!