SonicWall NSM Inspector Summary
Summary
| Property | Value |
|---|---|
| Production Status | Preview |
| Category | Network |
| Discovers | One child launchpoint per managed firewall in the customer's NSM tenant (one parent launchpoint per customer tenant) |
Description
Parent/child inspector for SonicWall Network Security Manager (NSM). Each parent launchpoint is configured for one customer's NSM tenant (MySonicWall API Key plus that customer's NSM Tenant ID) and auto-discovers the tenant's managed firewalls as children, with Liongard suggesting an Environment for each based on the NSM tenant name. Each firewall child collects its own device groups, firmware posture, configuration backups, change history, templates, alerts, and security posture. The inspector coexists with, and doesn't replace, the direct-device SonicWall Inspector and the SonicWall Capture Client Inspector.
Data View Information
Parent Overview Table
- Fleet Overview
- Firewalls: Serial, Name, Model, SonicOS Version, Firmware Version, Status, Public IP, Group, Last Check-in
- Skipped Collections: Collection, HTTP Status, Reason
Parent Data Tab Headers
- Fleet Overview
- NSM Admin Users
Child Overview Table
- Overview
- Serial
- Name
- Model
- SonicOS Version
- Status
- Group
- Public IP
- Last Check-in
- Skipped Collections: Collection, HTTP Status, Reason
Child Data Tab Headers
- Overview
- Firmware
- Backups
- Recent Commits
- Templates
- Alerts
- Security Posture
Metrics
| Metric | Description |
|---|---|
| SonicWall NSM: Total Firewalls Count | Managed firewalls in this tenant. |
| SonicWall NSM: Firewalls List | Names of all managed firewalls in this tenant. |
| SonicWall NSM: Firewalls by SonicOS Version | Managed firewalls grouped by SonicOS major version. |
| SonicWall NSM: Firewalls by Model | Managed firewalls grouped by model. |
| SonicWall NSM: Offline Firewalls Count | Managed firewalls currently reporting an offline status. |
| SonicWall NSM: Offline Firewalls List | Names of managed firewalls currently reporting an offline status. |
| SonicWall NSM: Not Checked In 24h Count | Managed firewalls that haven't checked in to NSM in the last 24 hours, including any with no check-in recorded. |
| SonicWall NSM: Not Checked In 24h List | Names of managed firewalls that haven't checked in to NSM in the last 24 hours. |
| SonicWall NSM: Admin Users Count | NSM admin users with access to this tenant. |
| SonicWall NSM: Admin Users Without MFA Count | NSM admin users without MFA enabled. |
| SonicWall NSM: Admin Users Without MFA List | Usernames of NSM admin users without MFA enabled. |
| SonicWall NSM: Stale Admin Users | Usernames of NSM admin users with no login in the last 90 days, or who have never logged in. |
| SonicWall NSM: Firmware Current Version | The firmware version currently running on this firewall. |
| SonicWall NSM: Firmware Outdated | Whether newer firmware is available for this firewall. |
| SonicWall NSM: Most Recent Backup Timestamp | Date and time of this firewall's most recent successful configuration backup. |
| SonicWall NSM: Has Recent Backup | Whether this firewall has a successful configuration backup in the last 30 days. |
| SonicWall NSM: Recent Commits Count (7d) | Configuration commits recorded for this firewall in the last 7 days. |
| SonicWall NSM: Active Alerts Count | Active NSM alerts for this firewall. |
| SonicWall NSM: Active Critical Alerts Count | Active critical-severity NSM alerts for this firewall. |
| SonicWall NSM: Gateway AV Enabled | Whether Gateway Anti-Virus is enabled on this firewall. |
| SonicWall NSM: Gateway AV Disabled | Whether Gateway Anti-Virus is currently disabled on this firewall. |
| SonicWall NSM: IPS Enabled | Whether Intrusion Prevention (IPS) is enabled on this firewall. |
| SonicWall NSM: IPS Disabled | Whether Intrusion Prevention (IPS) is currently disabled on this firewall. |
| SonicWall NSM: Content Filtering Enabled | Whether Content Filtering is enabled on this firewall. |
| SonicWall NSM: Content Filtering Disabled | Whether Content Filtering is currently disabled on this firewall. |
Actionable Alerts
All rules are disabled by default. Enable the ones you want to use.
| Rule | Trigger | Severity |
|---|---|---|
| Managed Firewall Count Changed | The number of managed firewalls in the tenant changed (a firewall was added or removed). | Low |
| Firewalls Offline | One or more firewalls in the tenant are reporting offline. | Medium |
| Firewalls Not Checked In Count Changed | The number of firewalls that haven't checked in within 24 hours changed. | Medium |
| Firewall Firmware Outdated | Newer firmware is available for this firewall. | Medium |
| Firewall Missing Recent Backup | This firewall has no successful configuration backup in the last 30 days. | High |
| Recent Commit Count Changed | This firewall has one or more configuration commits in the last 7 days. | Low |
| Active Critical Alert Raised | This firewall has one or more active critical-severity alerts. | High |
| Gateway AV Disabled | Gateway Anti-Virus is disabled on this firewall. | High |
| IPS Disabled | Intrusion Prevention (IPS) is disabled on this firewall. | High |
| Content Filtering Disabled | Content Filtering is disabled on this firewall. | High |
| NSM Admin User Count Changed | The number of NSM admin users on the tenant changed. | High |
| Admin User Without MFA | One or more NSM admin users don't have MFA enabled. | High |
Updated about 3 hours ago
Did this page help you?