New IBM Guardium training videos from IBM Learning ServicesOur IBM Leaarning Services team have been busy creating a number of How-to videos to help improve Guardium expertise. Please check these out to improve your Guardium knowledge How-to videos from IBM Learning Services If you want more of these then please "like" the videos so that we can understand how valuable these are to our customers. This will help determine how much further investment is put into this training.
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Reference document on policy definition for the S-TAP on DB2 z/OSTake a look at a great reference document with examples on policy definition for the S-TAP on DB2 z/OS: |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Some important links for IBM Security Guardium V10We announced V10 on August 28th, 2015. Here is your handy dandy cheat sheet of V10 links. More coming.
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Version 8.2 entering End Of Service on September 30, 2016IBM Security Guardium version 8.2 will enter End Of Service (EOS) September 30, 2016 Customers interested in continued support for these version after the EOS date may purchase a Service Extension (SE) up to 3 years. The fee-based Service Extension provides technical support (e.g. defect corrections, restrictions, and bypasses) for new problems discovered after a product has been withdrawn from support. Fixes are provided at the "then current" corrective service level (Fix Pack, PTF, CSD, etc.). Conditions apply. Customers with current Subscription & Support contracts are eligible for an upgrade prior to the EOS date.
IBM Security Guardium v10.1 Announcement Tech Talk for IBM Security Guardium V10.1 |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Some important links for 9.5It's that time again. A new release means a whole bunch of new URLs. Let me know if something is missing that you think would be useful to add.
Kathy |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Some important links for 9.1 (including z/OS)9.1 for the appliance is Patch 100 on top of 9.0 product image. If you download from Passport Advantage, you will get Patch 100 as well as the base image. But do not forget to go through appropriate health checks before upgrading. The patches for 32-bit, 64-bit, and the health checks are on FixCentral. The Windows S-TAP is available now on FixCentral as well. The UNIX one will be available a little later. Documentation and planning
Program Directories for the z S-TAPS
What's new presentations (tech talks) |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||
IBM Guardium - CLI Quick reference
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||
How to enable Guardium V9 FeaturesUnit Utilization Report
Issue detailsUnit utilization report is not showing up in Guardium version 9.
Statistics for these reports are not enabled by default on any of the appliances. RemediationTo get this report working on collectors/aggregators following command has to be executed “store monitor gdm_statistics 1”
Validation
Guardium Monitor -> Units Utilization
Enterprise Buffer Usage ReportThis report will give the overall buffer usage report from all the appliances on the central manager view. Issue DetailsThis report by default does not get populated by default on the central manager, please find the screen shot below about the error message seen by default.
Remediation Steps
ValidationOnce the collection is enabled on the CM, the report on the central manager will be like shown below which will have Buffer report from all the appliances.
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||
What is data-level security and why might you care?I will be the first to admit that when I first heard of 'data level security' I had no idea what it meant. It's one of those terms that could mean almost anything, depending on what context you first heard it. So, let's get over the term and focus on what the capability is. Simply put, it enables you to create automatic filtering of audit data based on who the viewer is and their association with the particular audited database (hence the term data-level...). The beauty of this is that you can create one report definition, such as a report that shows database activity, and when the Oracle DBA sees it he or she would only see Oracle information, and when the DB2 DBA he or she would only see activity for the DB2 database. Furthermore, you can overlay your organizational structure so that the DBA manager could see the audit data for all the databases. This is quite a simplification, but I think trying to explain it in words is hard. You really need a visual and an example. For this reason, I urge you to go read this developerWorks article that one of my colleagues and I coauthored. It has nice pictures and walks you through a scenario that includes not just DBA roles, but auditor roles as well. Check it out. Kathy
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||
F5 Deployment Guides for Guardium V9 capabilities Hi I wanted to let everyone know that F5 has published two step by step deployment guides- you can find them on their dw wiki page: One to support what we call Guardium "grid" and another for the real-time application end user identification from their firewall. If you didn't listen in or download the notes and slides from the What is new in V9 Tech Talk, you may not have a clue what I'm talking about so I'll briefly summarize:
Kathy Zeidenstein |
