Managing datasource credentials with CyberArk

Guardium supports the CyberArk Application Password Provider, a robust solution to the numerous maintenance and security challenges that arise in managing passwords. Use CyberArk to securely store, provision, audit, and manage your Guardium datasource credentials.

Existing Challenges

• Datasource credentials are updated by database administrators, and manually passed on to users. Easy access to this highly sensitive information creates significant security risks and vulnerability.
• Periodical updates to passwords require manual synchronization across all datasources.
• The challenge is compounded in a large-scale environment where hundreds or thousands of datasource credentials require systematic maintenance.

Benefits of using CyberArk with Guardium

• Credentials are defined, secured, and managed in a digital vault, eliminating the need to embed them locally in the Guardium system.
• Depending on business needs, any number of vaults can be configured by using the CyberArk web console.
• Passwords are automatically generated and replaced for all supported database types, meeting audit and regulatory requirements.
• The CyberArk Application Password Provider that is integrated with Guardium, allows retrieved credentials to be securely cached locally. This reduces the frequency in communication between the Guardium system and the CyberArk vault, improving speed and performance. If there is a network outage, the datasources remain intact and functional.