This article applies to:

• WebTrends Firewall Suite 4.0

Question:

Reply:

Installation:

• How To Install:
  To install Firewall Suite, run the following on the system you want to install onto:

  setup.exe

  You will be prompted for the install location. Choose a location on your local system.

  You will also be asked what components you wish to install with the application:

  Program and Program files - these are the core files necessary for Firewall Suite to run properly.

  Examples - these are sample profiles, sample log files, and the sample departments.txt file. If this is the first time you have looked at this version, we suggest you install the examples.

  If the installation detects that you have a previous installation on your system, it will give you an opportunity to automatically backup replaced files. If your custom files are not backed up before this process, we recommend choosing this procedure.
  
  
  

• Uninstall Instructions:
  To uninstall Firewall Suite, do the following, depending on the Windows version you are running:

  Windows NT - If installed, stop the WebTrends Scheduler service. Open the Scheduler, select the Service tab, and press "Stop Service". Exit the application. Then from the system Control Panel, select Add/Remove Programs, select WebTrends Firewall Suite, then press Add/Remove. You will be prompted for any further instructions.

  Windows 2000 - If installed, stop the WebTrends Scheduler service. Open the Scheduler, select the Service tab, and press "Stop Service". Exit the application. Then from the system Control Panel, select Add/Remove Programs, select the WebTrends Firewall Suite, then press Change/Remove. You will be prompted for any further instructions.

What Is New for Version 4.0:

• Improved User Interface:
  Based on user input and research we have dramatically improved the configuration and use in the product UI. Improvements such as tree controls, more fluid flow, and a more intuitive design have greatly simplified and enabled the power of Firewall Suite.

• Configuration Enhancements:
  Improvements have been made to many configuration settings for a greater range of reporting possibilities. User configurable Report Ranges using macros provide the ability to select any report range desired. FastTrends, DNS caches, and FTP caches all come equipped with the ability to schedule flushing to free up resources. The configuration and selection of saved report templates has become vastly more manageable in the newly revamped Reports dialogue. Users can now define Search Engines through the UI. Many more features have been made configurable for both global and per-profile activation.

• New Reports:
  Reports have been clean up and made more attractive. Legends are now neatly placed along table items.

• New Start Of Week Setting:
  Under Options, users can now specify any day of the week as the start of the week in their particular region. This information is used during report generation.

• New Time Zone Adjustment Per Profile:
  The Origin Time Zone specifies the time zone from which Firewall Suite should assume your log files originated if the log files do not specify otherwise. Most log file formats include the time zone of the server, and others, such as W3C format, are always in GMT. Those that do not specify and are not known to be GMT will be parsed using the Origin Time Zone setting.

  The Report Time Zone specifies the time zone in which the reports will be used.

  If either of these settings is changed, all existing FastTrends data for the profile must be deleted and regenerated.

Known Issues:

• Windows msvcrt.dll System File:
  This new version of Firewall Suite requires an update to the mscvrt.dll system file. This update will occur on install. In some cases, when other software has this system file open, the update will not occur. If you launch the WebTrends application and receive an error regarding msvcrt.dll, the upgrade was not successful and the following steps must be taken:

  • Go to a command line prompt and rename the following file:

    \Winnt\System32\msvcrt.dll

    to

    \Winnt\System32\msvcrt.old

  • Copy the msvcrt.dll file from the Firewall Suite root install directory to the \Winnt\System32 directory.

  • Restart your computer.

  This update should fix any msvcrt.dll errors.
  
  
  

• LEA and syslog servers from previous versions:
  If you do not uninstall a previous version of Firewall Suite and install Firewall Suite v4.0 in a different directory, you might encounter problems running the  LEA Service and the  Syslog Server service. This is due to a registry key pointing to the incorrect location. To fix this problem, close any version of WebTrends software that is running. Then, open a NT command prompt, and go to the directory in which your old installation is. First type:

  WTSyslogServer.exe /remove

  and then press enter. Then type:

  WTLeaService.exe /remove

  and then press enter. This will remove the old NT services from the registry.

  Start the new version of Firewall Suite. If there are profiles using the LEA Service or the Syslog Server, then Firewall Suite will automatically add the correct NT services. If not, add these profiles now.

  Exit and unload Firewall Suite, and using the Services Control Panel applet, check to see if these services are running. If they are, shut them down. Copy the old profiles containing the LEA/Syslog log files over to the new installation directory, and restart the services.
  
  
  

• Running WebTrends as a Service in Windows 2000:
  

  • Go to Control Panel.
  • Select Administrative Tools.
  • In the Administrative Tools window, select, Local Security Policy.
  • Under Security Settings, expand Local Policies.
  • Open User Rights Assignment.
  • Assign User Rights for "Act as Part of the Operating System", "Log on as a Service", and "Log on Locally".

  Start Firewall Suite. Click Scheduler, click the Services tab, click the button "Start service". The Scheduler icon will appear in the systray, and the WebTrends Scheduler will now be listed as a service.
  

• Changes to predefined "Last XX Days" report ranges:
  In Report Range settings, the behavior of all of the "Last xx Days" report ranges has changed to be "Last Complete xx Days". An INI setting is provided as a work-around for those who prefer the behavior the way it was. The change is made in the file "webtrends.ini" in the installation root:

  [Defaults]
  ReportOnlyCompleteDaysForLastXDaysRanges=

  The default value is 1, even if the INI setting is missing. If the value is 1, all Incoming Web Activity and Outgoing Web Activity report types run against a range of "Last 7 days", "Last 14 days", or "Last 30 days" will actually be run against the last 7, 14, or 30 complete days, for example, the report will end at midnight, last night, and not include today. Those items will appear as "Last 7 full days", "Last 14 full days", and "Last 30 full days" in the drop-down list. If this ini setting is 0, the app will behave as 3.0 and previous versions did in this regard, where incomplete days were included with these range designations.
  
  
  

• Issue with copying profiles with more than one filter:
  In the General Firewall Activity cartridge, if you copy a profile with more than one filter, only the first filter in the profile file is copied successfully. This problem does not exist in the Incoming or Outgoing Web Activity cartridges.

Supported Firewalls and Proxy Servers:

• Supported list of firewalls and proxy servers:
  

  Q10939: Which firewalls are supported?

This article was previously published as:

NETIQKB2362