Smart assistant for monitoring and compliance

Learn how to deploy monitoring agents to your database servers and configure database monitoring for compliance with security standards and regulations.

About this task

Smart assistant for monitoring and compliance is comprised of the following two tools:
Deploy monitoring agents

Use the Deploy Monitoring Agents tool to automatically activate GIM clients, install S-TAPs, and begin monitoring database traffic.

The deploy monitoring agents tool simplifies the process of establishing a Guardium deployment. Building on existing Guardium installation manager (GIM) infrastructure, the deploy monitoring agents tools helps you quickly find database servers, install monitoring agents (S-TAPs), and configure inspection engines for your databases. In addition, the tool provides a centralized view for tracking and reviewing deployment status.

Compliance monitoring

After deploying monitoring agents (S-TAPs), use the Compliance Monitoring tool to establish monitoring for specific security standards and regulations.

Guardium provides several compliance monitoring templates--groups, security policies, and reports corresponding to specific standards and regulations--including the following:
  • Basel Committee on Banking Supervision (BASEL II)
  • General Data Protection Regulation (GDPR)
  • General Data Protection Regulation for Db2 for z/OS (GDPR for Db2 for z/OS)
  • Health Insurance Portability and Accountability Act (HIPAA)
  • Payment Card Industry Security Standard (PCI)
  • Personally Identifiable Information (PII)
  • Sarbanes-Oxley Compliance (SOX)
These compliance monitoring templates are especially useful for organizations that must comply with one of the associated standards or regulations in a short period of time. After installing security policies, the compliance monitoring tool guides administrators or compliance officers through the initial setup and population of groups with organization-specific information such as client IP addresses and specific privileged user IDs. In addition, the compliance monitoring tool periodically checks your Guardium environment for new databases that can be monitored using the compliance monitoring templates.

Procedure

  1. Review the following information to begin familiarizing yourself with the tools.
  2. Deploy monitoring agents for your database servers.
    1. Verify that you have met the prerequisites for using the deploy monitoring agents tool: Prerequisites for deploying monitoring agents.
    2. Deploy monitoring agents to your database servers: Deploy monitoring agents.
  3. Configure compliance monitoring for your database servers.

Results

After successfully deploying monitoring agents and configuring compliance monitoring for your database servers, Guardium begins monitoring your database traffic.

For more information about interpreting what you see on the compliance monitoring dashboard, see Compliance summary.