Managing your Guardium system

Management tasks include monitoring your system’s health and managing artifacts such as groups, domains, and notifications.

Guardium Administration
Guardium® administrators perform various administration and maintenance tasks.
Certificates
Install certificates so you can connect to the Guardium GUI, and for Guardium-S-TAP® communication. Check certificates regularly, so you can update them before they expire.
Alerts
Learn how to work with alerts.
System performance and monitoring
Learn to use Guardium tools to maintain system performance: unit utilization reports to identify under- and over-utilized systems; system self-monitoring; and the Services status page.
Scheduling
The general-purpose scheduler is used to schedule many different types of tasks (archiving, aggregation, workflow automation, and so on).
Aliases
Create synonyms for a data value or object to be used in reports or queries.
Dates and Timestamps
Use a calendar tool to select an exact date, and a relative date picker to select a date that is relative to the current time.
Building Time Periods
Policy rules and query conditions can test for events that occur (or not) during user-defined time periods.
Cipher suites
Cipher suites are combinations of cryptographic parameters that define the security algorithms and key sizes.
Comments
Comments apply to definitions and to workflow process results.
Customer Uploads
The Database Protection Subscription Service supports the maintenance of predefined assessment tests, SQL based tests, CVEs, APARs, and groups such as database versions and patches.
Stream Guardium data to another application
Use the Data Streaming to send traffic collected by Guardium to another tool for analysis.
Big Data Intelligence
The Guardium Big Data Intelligence (GBDI) platform stores collected data over longer timeframes, providing direct, near real-time access to data security and compliance reports and insights.
Exporting and importing definitions
Use export and import definitions if you have multiple systems with identical or similar requirements and are not using central management. You can define the components that you need on one system and export those definitions to other systems that are on the same software release level.
Remote loggers
View the forwarding rules for the remote logging and test the connections.
Manage Custom Classes
Upload and maintain custom classes used in alerts or evaluations. Manage custom classes by clicking Setup > Custom Classes.
GDPR readiness: Considerations when configuring Guardium
Learn how Personal Identification Information (PII) data gets stored on your Guardium system, and how to manage this.
Groups
Using groups makes it easy to create and manage classifier, policy and query definitions, as well as roll out updates to your S-TAP's and GIM clients. Rather than having to repeatedly define a group of data objects for an access policy, put the objects into a group to easily manage them.
Security Roles
Security roles are used to grant access to data (groups, queries, reports, etc.) and to grant access to applications (Group Builder, Query-Report Builder, Policy Builder, CAS, Security Assessments, etc).
How to install patches
Install a single patch or multiple patches as a background process.
Support Maintenance
The Support Maintenance feature is password protected and can be used only as directed by Technical Support. Contact Technical Support if you require more information.

Related information

IBM Security Guardium product information