Security Analytics Engine 1.1 - Release Notes

Security Analytics Engine 1.1

These release notes provide information about the Security Analytics Engine release.

•	About Security Analytics Engine 1.1

•	New features

•	System requirements

•	Product licensing

•	Getting started with Security Analytics Engine 1.1

•	Globalization

•	About Dell

About Security Analytics Engine 1.1

The Security Analytics Engine from Dell™ provides an additional level of security that can be customized to fit the needs of every application. The Security Analytics Engine works by monitoring users and browsers to ensure they are not accessing applications from locations, networks, etc. that are potentially unsafe, thus reducing the threat of a malicious user or browser gaining access to your application.

Security Analytics Engine 1.1 is a minor release, with enhanced features and functionality. See New features.

New features

New features in Security Analytics Engine 1.1:

•

New method for calculating risk scores - An enhanced calculation method is now used for determining the threat level of an access attempt. This calculation method takes into account the severity of each condition as well as the impact it has on all other conditions within a risk policy. As a result, the risk score will now be represented as a percentage from 0-100%.

•

New configuration capabilities - Risk policies now allow modifiers to be applied to conditions in order to increase or lessen the affect a condition has on a risk score. When modifiers are triggered during an access attempt they only impact the condition they are associated with rather than the entire risk score.

•

New condition types - The following types of conditions are available in the Security Analytics Engine: Abnormal Authentication, Abnormal Browser, Abnormal Location, Abnormal Time, Role List, Associated w/ Application Category, Associated w/ Application Threat Level, Associated w/ Blacklist, Associated w/ Country, Associated w/ Malware, Dynamic Blacklist, Last Logon, LDAP Group, Country List, Authentication List, Network List.

•	New LDAP plugin - The LdapPlugin is used for gathering and storing information from the LDAP server.

•	New shared risk policies - Create risk policies which can be used by multiple applications while managed from a single place.

•	Alerting - Email alerts can now be sent when a certain risk score or condition score is surpassed during an access attempt.

•	Expanded reporting capabilities - Lists of audit events can now be downloaded directly from the Security Analytics Engine.

•	New Botnet monitoring capabilities - The SonicWALLPlugin (previously called the MalwareDetectionPlugin) can now monitor for connections with Botnet command and control servers.

System requirements

Before installing Security Analytics Engine 1.1, ensure that your system meets the following minimum hardware and software requirements.

Table 1. Security Analytics Engine system requirements

Platform	Intel® Core or AMD x64 CPU
Memory	8 GB
Disk Space	16 GB free disk space
Operating System	Any of the following operating systems are supported: • Windows Server® 2008 R2 (x64)(with latest updates applied) • Windows Server 2012 (x64) • Windows Server 2012 R2 (x64)
Server Software	• SQL Server® 2008 • SQL Server 2008 R2 • SQL Server 2012 • SQL Server 2014 • .NET Framework 4.5 or above • IIS 7.5 or above
Browsers	NOTE: If Single Sign-On (SSO) is desired, the browser version and configuration must support Kerberos for the Security Analytics Engine URL. See URL configuration for information. All browsers must have JavaScript enabled in order to access the Security Analytics Engine. The following browsers are supported: Windows® • Internet Explorer® 9 or above • Chrome™ 25 or above • Firefox® 20.0 or above Mac® • Safari® 5.1 or above NOTE: If attempting to access the Security Analytics Engine with an unsupported browser version, you will be prompted to upgrade your browser before being allowed access. NOTE: Mobile browsers are not supported.
SonicWALL™	One of the following SonicOS versions is required if you plan on using the SonicWALL malware detection capabilities of the Security Analytics Engine. • SonicOS 5.8 • SonicOS 5.9 • SonicOS 6.0 • SonicOS 6.1 • SonicOS 6.2