Linux and UNIX systems: S-TAP support matrix
Select your S-TAP setup depending on the data you want to monitor or block. Use this table to identify the monitoring mechanisms (Exit libraries, K-TAP, A-TAP) that can perform the operations you require, per operating system and database.
For example, you may want to track or perform one or more of the following:
- local traffic only
- local and network traffic
- shared memory
- encrypted data
- monitor and block
- monitor only
This table covers the most common platforms, database types, and protocols, supported by Guardium's monitoring mechanisms. The table presents general guidelines. There may be other combinations that are not presented here that are supported. Some of the supported setups presented here may be dependent on specific configurations. Contact Customer Support to verify the best setup for your specific needs. Empty cells indicate that the combination is not supported.
The exit libraries are preferred over all other monitoring mechanisms. If you cannot use an exit
library, K-TAP is the next choice, then A-TAP, and finally PCAP.
OS | Database | Network traffic | Local traffic | Encrypted traffic | Shared Memory | Kerberos | Blocking | Redaction | UID Chain |
---|---|---|---|---|---|---|---|---|---|
AIX | Oracle | K-TAP | K-TAP | A-TAP (ASO, SSL) | K-TAP | K-TAP, A-TAP | K-TAP | K-TAP | |
AIX | Sybase ASE | K-TAP | K-TAP | A-TAP (SSL) | K-TAP | K-TAP, A-TAP | K-TAP | K-TAP, A-TAP (A-TAP only when configured for real IPs) | |
AIX | Sybase IQ | K-TAP | K-TAP | A-TAP (decrypts login packets only, no TLS support) | A-TAP (Sybase 16.1 does not support DB username) | K-TAP, A-TAP | K-TAP | K-TAP | |
AIX | DB2 | DB2 Exit, K-TAP | DB2 Exit, K-TAP | DB2 Exit | DB2 Exit, K-TAP | K-TAP | DB2 Exit, K-TAP | K-TAP | DB2 Exit, K-TAP |
AIX | Informix | Informix Exit, K-TAP | Informix Exit, K-TAP | Informix Exit | Informix Exit, K-TAP | Informix Exit, K-TAP | Informix Exit, K-TAP | Informix Exit, K-TAP | |
HP-UX | Oracle | K-TAP | K-TAP | A-TAP (ASO, SSL) | K-TAP | K-TAP, A-TAP | K-TAP | K-TAP | |
HP-UX | Sybase ASE | K-TAP | K-TAP | A-TAP (Sybase 15 only) | K-TAP, A-TAP | K-TAP | K-TAP, A-TAP (A-TAP only when configured for real IPs) | ||
HP-UX | Sybase IQ | K-TAP | K-TAP | K-TAP | K-TAP | K-TAP | |||
HP-UX | DB2 | DB2 Exit, K-TAP | DB2 Exit, K-TAP | DB2 Exit | DB2 Exit, K-TAP | K-TAP | DB2 Exit, K-TAP | K-TAP | DB2 Exit, K-TAP |
HP-UX | Informix | Informix Exit, K-TAP | Informix Exit, K-TAP | Informix Exit | Informix Exit, K-TAP | Informix Exit, K-TAP | Informix Exit, K-TAP | Informix Exit, K-TAP | |
Linux | DB2 | DB2 Exit, K-TAP | DB2 Exit | DB2 Exit, A-TAP | K-TAP | DB2 Exit, K-TAP, A-TAP (A-TAP with Linux 2.6.36 and higher only) | K-TAP | DB2 Exit, K-TAP | |
Linux | Informix | Informix Exit, K-TAP | Informix Exit, K-TAP | Informix Exit | Informix Exit, A-TAP | Informix Exit, K-TAP, A-TAP (A-TAP with Linux 2.6.36 and higher only) | Informix Exit, K-TAP | Informix Exit, K-TAP | |
Linux | Oracle | K-TAP | K-TAP | A-TAP (ASO, SSL) | K-TAP | K-TAP, A-TAP (A-TAP with Linux 2.6.36 and higher only) | K-TAP | K-TAP | |
Linux | Postgres | K-TAP | K-TAP | A-TAP | K-TAP, A-TAP (A-TAP with Linux 2.6.36 and higher only) | K-TAP | K-TAP, A-TAP (A-TAP only when configured for real IPs) | ||
Linux | Sybase IQ | K-TAP | A-TAP (x86_64 only) | A-TAP (Sybase 16.1 does not support DB username) | K-TAP, A-TAP (A-TAP with Linux 2.6.36 and higher only) | K-TAP | K-TAP, A-TAP (A-TAP only when configured for real IPs) | ||
Linux | Sybase ASE | K-TAP | K-TAP | A-TAP | K-TAP, A-TAP (A-TAP with Linux 2.6.36 and higher only) | K-TAP | K-TAP, A-TAP (A-TAP only when configured for real IPs) | ||
Linux | MongoDB | K-TAP | K-TAP | A-TAP | K-TAP, A-TAP (A-TAP with Linux 2.6.36 and higher only) | K-TAP | K-TAP, A-TAP (A-TAP only when configured for real IPs) | ||
Linux | Teradata | Teradata Exit, K-TAP | Teradata Exit, A-TAP | Teradata Exit, K-TAP, A-TAP (ATAP with Linux 2.6.36 and higher only) | K-TAP | K-TAP, A-TAP (A-TAP only when configured for real IPs) | |||
Linux | Netezza | K-TAP | K-TAP | K-TAP | K-TAP | ||||
Linux | Cassandra | K-TAP | K-TAP | K-TAP | K-TAP | ||||
Linux | SAP HANA | K-TAP | K-TAP | K-TAP | K-TAP | ||||
Linux | MySQL | K-TAP | K-TAP | K-TAP | K-TAP | K-TAP | |||
Linux | MemSQL | K-TAP | K-TAP | K-TAP | K-TAP | K-TAP | K-TAP | ||
Linux | Vertica | K-TAP | K-TAP | K-TAP | K-TAP | K-TAP | |||
Linux | Hadoop (Cloudera / Hortonworks) | K-TAP, Cloudera Navigator, Hortonworks and Apache Ranger | Cloudera Navigator, Hortonworks and Apache Ranger | Hortonworks and Apache Ranger | K-TAP | ||||
Linux | Greenplum | K-TAP | K-TAP | A-TAP | K-TAP, A-TAP (Linux 2.6.36 and higher only) | K-TAP | K-TAP | ||
Linux | MariaDB | K-TAP | K-TAP | K-TAP | K-TAP | K-TAP | |||
Linux | Aster | K-TAP | K-TAP | K-TAP | K-TAP | K-TAP | |||
Linux | Couch | K-TAP | K-TAP | K-TAP | K-TAP | ||||
Linux | Hive | K-TAP | K-TAP | K-TAP | K-TAP | ||||
Linux | Accumulo | K-TAP | K-TAP | K-TAP | K-TAP | ||||
Linux | Impala | K-TAP | K-TAP | K-TAP | K-TAP | ||||
Linux | Hue | K-TAP | K-TAP | K-TAP | K-TAP | K-TAP | |||
Linux | WebHDFS | K-TAP | K-TAP | K-TAP | K-TAP | ||||
Linux | Solar | K-TAP | K-TAP | K-TAP | K-TAP | ||||
Solaris | Oracle | K-TAP | K-TAP | A-TAP (ASO, SSL) | K-TAP | K-TAP, A-TAP | K-TAP | K-TAP | |
Solaris | Sybase ASE | K-TAP | K-TAP | A-TAP (Sparc only) | K-TAP | K-TAP, A-TAP | K-TAP | K-TAP, A-TAP (A-TAP only when configured for real IPs) | |
Solaris | Postgres | K-TAP | K-TAP | A-TAP (9.3 and higher) | K-TAP, A-TAP | K-TAP | K-TAP, A-TAP (A-TAP only when configured for real IPs) | ||
Solaris | Sybase IQ | K-TAP | K-TAP | K-TAP | K-TAP | K-TAP | |||
Solaris | DB2 | DB2 Exit, K-TAP | DB2 Exit, K-TAP | DB2 Exit | DB2 Exit, K-TAP | K-TAP | DB2 Exit, K-TAP | K-TAP | DB2 Exit, K-TAP |
Solaris | Informix | Informix Exit, K-TAP | Informix Exit, K-TAP | Informix Exit | Informix Exit, K-TAP | Informix Exit, K-TAP | Informix Exit, K-TAP | Informix Exit, K-TAP |