Supported Platforms and Requirements for Guardium Data Protection 11.5

Detailed System Requirements

Abstract

This document summarizes the supported databases, operating systems, browsers, recommended hardware, and licensing information for IBM Security Guardium 11.5.

Content

For more information about Guardium 11.5, see IBM Docs for IBM Security Guardium.

Supported platforms for Data Activity Monitoring (DAM), File Activity Monitoring (FAM), and Vulnerability Assessment (VA):

Attention: Guardium Data Protection tries to support new versions of existing data sources as quickly as possible. Typically, new versions are supported within three (3) months of release, but support for some data sources may take longer.

DAM: on-premises and cloud databases

For Guardium version 11.0 and later, most supported platforms information for DAM is available through the Guardium support matrix. Information about data sources supported by data discovery and classification, External S-TAP, Cloud Event Streams, and Universal connector is documented in the following sections:

Supported datasources for data discovery and classification
Discovery and classification processes define how Guardium finds and treats sensitive data such as credit card numbers, social security numbers, and personal financial information. For more information, access the online IBM Documentation website, select a version, and navigate to Discover > Discover Sensitive Data.
Guardium supports some versions of the following data sources for discovery and classification:
- Amazon Redshift
- AWS RDS MySQL
- AWS RDS PostgreSQL
- AWS RDS Oracle
- AWS RDS Microsoft SQL Server
- AWS MongoDB
- IBM Db2 for Linux, UNIX, and Windows
- IBM Db2 for z/OS
- IBM D2 for i
- IBM Informix
- IBM Netezza
- Microsoft Azure
- Microsoft SQL Server
- MongoDB
- MySQL
- Oracle
- PostgreSQL
- SAP HANA
- Sybase
- Sybase IQ
- Teradata
- TEXT
- TEXT: HTTP
- TEXT: FTP
- TEXT: SMB
- TEXT: HTTPS
Note: Database vendors are continually updating their software, which makes it difficult to thoroughly validate Guardium support for all releases. As a best practice, we recommend that you validate discovery and classification functionality with specific database releases in a test environment before you deploy to production.

External S-TAP

External S-TAP is a component of Guardium that can intercept traffic for cloud and on-premises database services without installing an inspection agent on the database server. For more information, see Guardium External S-TAP in the IBM Documentation website.

The External S-TAP service for Cloud Pak for Data can target all databases supported by External S-TAP as well as databases hosted on Cloud Pak for Data for compliance monitoring and data security. For more information, see Guardium External S-TAP in the Cloud Pak for Data content on the IBM Documentation website.

Guardium external S-TAP also supports database container images for the following databases.

Datasources	Supported versions	Notes
Amazon Aurora Mysql	All versions	Available for Amazon RDS cloud.
Amazon Aurora PostgreSQL	All versions	Available for Amazon RDS cloud.
Amazon Redshift	All versions	Available for Amazon Redshift.
Amazon DynamoDB	All versions	Available for Amazon DynamoDB
AWS Fargate	All versions	Available for AWS Fargate
CockroachDB	20.1.1	Available for on-premises
Db2	9.7, 10.1, 10.5, 11.1, 11.5	Available for on-premises and for IBM cloud. Native encryption (DATA_ENCRYPT) not supported.
Db2 Warehouse (SSL enabled and non-SSL enabled)	9.7, 10.1, 10.5, 11.1, 11.5	Available for on-premises and for IBM cloud. Native encryption (DATA_ENCRYPT) not supported.
Elasticsearch	6.8, 7.4	Elastic search 6.8 available on IBM cloud. Elastic search 7.4 available on AWS.
ElastiCache for Redis	All versions	Available for AWS.
Greenplum	6.1	Available for on-premises.
Google BigQuery	All versions	Available for Google cloud
Google Cloud SQL	All versions	Available for on-premises and Google Kubernetes Engine (GKE).
MariaDB (SSL enabled and non-SSL enabled)	10.4,10.5,10.6,10.7,10.8	Available for on-premises and for Amazon RDS cloud. Work with proxy protocol v2 supported S-TAP.
MemSQL	7.0	Available for on-premises.
Microsoft Azure SQL database	All versions	Supports Azure Active Directory for authentication.
Microsoft SQL Server (SSL enabled only)	All versions	Available for on-premises and for Microsoft Azure cloud, Amazon RDS cloud, and GoogleCloud SQL SSL-enabled encrypted connections are supported (including Force Protocol Encryption).
MongoDB (SSL enabled and non-SSL enabled)	4.2, .4, 5.0, 6.0	MongoDB 4.2 and later available for on-premises, IBM cloud, AWS, and Azure.
MongoDB Atlas	N/A	Available for IBM cloud, AWS, and Azure.
MySQL (SSL enabled and non-SSL enabled)	5.6, 5.7, 8.0	Available for on-premises, IBM cloud, AWS, Azure and Amazon RDS cloud, and GoogleCloud SQL.
Netezza Performance Server	11.2	Available for on-premises.
Oracle (SSL enabled and non-SSL enabled)	12.1, 19c, 21c (on-premises and autonomous cloud)	Available for on-premises and for Amazon RDS cloud. Note: Oracle ASO (native network encryption) is not supported.
Oracle Autonomous Database	All versions	Available for Oracle Cloud Infrastructure (OCI).
PostgreSQL (SSL enabled and non-SSL enabled)	All versions of 9.0, 10.0, 11.0,12.0	Available for: IBM cloud, Amazon AWS Cloud (including RDS), Azure, and GoogleCloud SQL. On-premises. Windows Active Directory is supported for authentication.
Redis	All versions of 4.0, version 5.0	Available for on-premises, AWS ElastiCache (Redis and Memcached), AWS, IBM Cloud
S3	All versions	Available for AWS.
SAP HANA	2.0/SPS4/45	Available for on-premises for encrypted traffic.
Snowflake DB	All versions - Snowflake Services	Available for Microsoft Azure and Amazon AWS.
SQL Data Warehouse	All Versions	Available for Microsoft Azure cloud.
Sybase	All versions of 15.0 and 16.0	Available for on-premises.
Sybase IQ	All versions of 15.0 and 16.0	Available for on-premises.
Teradata	Non-SSL: All versions SSL-enabled: V17.0 and later
Vertica	9.3	Available for on-premises.

Cloud Event Streams

Guardium supports the following data sources for data streaming with cloud data service protection. For more information, see Cloud database service protection.

AWS Kinesis

AWS datasource	Version	Support
AuroraMySQL	5.7.mysql_aurora.2.07.2	Datastreams only
AuroraPostgreSQL	11.9	Datastreams only
Oracle	12, 18	Native audit only
Oracle	19	Datastreams and Native audit

Azure Event Hubs

Azure datasource	Version
AzureSQL	Microsoft SQL Azure (RTM) - 12.0.2000.8
CosmosSQL	Default version
CosmosMongoDB	Default version
CosmosCassandra	Default version
CosmosGremlin	Default version
CosmosTable	Default version

Universal Connector Plug-ins
Guardium provides prepackaged plug-ins for the Guardium universal connector. For more information, see Guardium universal connector.
For a list of prepackaged plug-ins for the Guardium Universal Connector, see Universal Connectors.

FAM: monitoring, discovery, and classification

With the Guardium File Activity Monitor, you can monitor, discover, and classify sensitive data residing in files and directories. For more information about platforms, servers, and devices supported for file monitoring, see Guardium Supported Platforms for Files.

Vulnerability Assessment

If you have a VA license, you can access the Vulnerability Assessment menus from Guardium. For more information, see Introducing Guardium Vulnerability Assessment.

Datasources	Supported versions
Amazon RDS data sources	Oracle, SQL Server, MySQL, PostgreSQL
Amazon Redshift	All versions - AWS services
Apache Cassandra	3.11, 4.0 (Supported in Vulnerability Assessment patch 11.0p511 and later)
Aster	6, 6.1
Azure SQL DB	All versions - Azure services
Cloudera Hadoop (includes Cloudera Manager and Hive)	All versions of 5.0, 6.0, 7.0
Couchbase	6.0, 6.5, 6.6, 7.0
DataStax Cassandra	5.1, 6.0, 6.7
IBM Db2 (Linux, Unix, and Windows)	9.7, 10.1, 10.5, 11.1, 11.5
IBM DB2 for i	6.1, 7.1, 7.2, 7.3
IBM Db2 for z/OS	10, 11, 12
IBM Informix	11.50, 11.70, 12.10, 14.10
IBM Netezza	6.0, 6.02, 7.0, 7.1, 7.2
MariaDB	10.4,10.5,10.6,10.7,10.8
Microsoft SQL Server	2012, 2014, 2016, 2017, 2019
MongoDB	4.2, 4.4, 5.0, 6.0 (Note: Versions 5.0 and 6.0 are supported in Vulnerability Assessment patch 11.0p511 and later)
Neo4j	4.2
Oracle	12.1, 19c, 21c (includes on-premises and autonomous cloud)
Oracle MySQL	5.5, 5.6, 5.7, 8.0
Percona MySQL	8.0 (Supported in Vulnerability Assessment patch 11.0p511 and later)
PostgreSQL	All versions of 9.0, 10.0, 11.0, 12.0, 13.0
SAP HANA	1.0, 2
SAP Sybase ASE	15.7, 16
SAP Sybase IQ	15.4, 16
Snowflake	All versions of Snowflake services
Teradata	17

Supported browsers, hardware, and system requirements for virtual machines (VM):

Supported web browsers

The Guardium UI supports the following web browsers and display resolutions:

Microsoft Edge version 90.0.818.56 and later
Firefox ESR 52 and later
Chrome 70 and later
Display resolution 1366 x 768 or greater

Hardware and virtual machines

Guardium is available as a hardware or software offering, ensuring easy deployment in a wide variety of environments. As a hardware offering, the solution comes with licensed software fully loaded and tested on a physical appliance provided by IBM (hardware appliance). When delivered as a software offering, the solution comes as software images ready for deployment by the user on their own hardware (software appliance), either directly or as virtual appliances.

IBM Security Guardium is installable on Red Hat Enterprise Virtualization, VMware Virtualization, and Microsoft Hyper-V. For more information about technical requirements, see Guardium Appliance Technical Requirements.

Product capabilities, part numbers, and licensing information:

Guardium Data Protection offers various parts that are licensed based on the specific use case. Each part is associated with specific pricing metrics based on licensing models.

Based on supported use cases

Data Security Use cases	Target Data Environment or Data source type	Parts and Licensing Metrics
Data activity monitoring	Cloud-native database services such as PaaS or SaaS and containerized data sources	1. IBM Security Guardium Domain Package / CP4S Gen 3 (RU/VPC) OR 2. IBM Security Guardium Data Protection for Database Services (RVU/MAPC)
Data activity monitoring	On-premises or in the Cloud - IaaS only	1. IBM Security Guardium Domain Package / CP4S Gen 3 (RU/VPC or RU / MVS) OR 2. Data Protection parts (based on the data source type): IBM Security Guardium Data Protection for Databases (RVU/MVS), IBM Security Guardium Data Protection for Data Warehouse (RVU/MVS), IBM Security Guardium Data Protection for Big Data (RVU/MVS), IBM Security Guardium Data Protection for SAP HANA (RVU/MAPC)
Vulnerability Assessment	On-premises or in the Cloud	1. IBM Security Guardium Domain Package / CP4S Gen 3 (RU/VPC) OR 2. IBM Security Guardium Data Protection for Database Services (RVU/MAPC)
File activity monitoring	Unstructured data sources, on-premises	IBM Security Guardium Data Protection for Files (RVU/TB)
Data Discovery and Classification, Entitlement Reporting		Included as part of the DAM or VA products

Note:

Guardium Activity Monitor parts under the PVU licensing model are still supported, however, they have reached end of marketing (EOM). You can trade-up your existing entitlements to the latest IBM Security Guardium Domain package to modernize your licensing.
To extend your coverage on Z environments, you must use separate set of parts.

License Management

For more information about how to apply licenses, see Licenses to set up a Guardium system.

Based on data source type

Guardium offers monitoring solutions for several types of data sources, including databases, data warehouses, file systems, Big Data platforms, and data sources on z such as DB2, IMS and Datasets.

On premises or Cloud (IaaS only)

Platform	Datasource	Type	Licensing Options	Licensing/charge metrics	Additional Notes
Apache Software	CouchDB	NoSQL	IBM Security Guardium Data Protection for Big Data (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)	Big Data nodes
Apache Software	Cassandra	NoSQL	IBM Security Guardium Data Protection for Big Data (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)	Big Data nodes
Cloudera	Cloudera	Hadoop	IBM Security Guardium Data Protection for Big Data (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)	Big Data nodes
DataStax	DataStax Enterprise	NoSQL	IBM Security Guardium Data Protection for Big Data (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)	Big Data nodes
EMC	GreenPlum HD	Hadoop	IBM Security Guardium Data Protection for Big Data (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)	Big Data nodes
EMC	Pivotal	Hadoop	IBM Security Guardium Data Protection for Big Data (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)	Big Data nodes
Hortonworks	Hortonworks	Hadoop	IBM Security Guardium Data Protection for Big Data (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)	Big Data nodes
IBM	IBM BigInsights	Hadoop	IBM Security Guardium Data Protection for Big Data (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)	Big Data nodes
MemSQL Inc.	MemSQL	NoSQL	IBM Security Guardium Data Protection for Big Data (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)	Big Data nodes
MongoDB	MongoDB	NoSQL	IBM Security Guardium Data Protection for Big Data (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)	Big Data nodes
Teradata	Teradata Aster DB	Hadoop	IBM Security Guardium Data Protection for Big Data (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)	Big Data nodes
EMC	GreenPlum DB	Data Warehouse	IBM Security Guardium Data Protection for Data Warehouse (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)	DW nodes
HP	HP Vertica	Data Warehouse	IBM Security Guardium Data Protection for Data Warehouse (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)	DW nodes
IBM	IBM Db2 Warehouse	Data Warehouse	IBM Security Guardium Data Protection for Data Warehouse (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)	DW nodes
IBM	IBM Netezza	Data Warehouse	IBM Security Guardium Data Protection for Data Warehouse (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)	DW nodes
IBM	IBM PureData for Analytics	Data Warehouse	IBM Security Guardium Data Protection for Data Warehouse (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)	DW nodes
IBM	IBM PureData System for Operational Analytics (PDOA)	Data Warehouse	IBM Security Guardium Data Protection for Data Warehouse (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)	DW nodes
IBM	IBM BLU Acceleration	Data Warehouse	IBM Security Guardium Data Protection for Data Warehouse (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)	DW nodes
Oracle	Oracle Exadata	Data Warehouse	IBM Security Guardium Data Protection for Data Warehouse (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)	DW nodes
Teradata	Teradata	Data Warehouse	IBM Security Guardium Data Protection for Data Warehouse (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)	DW nodes
Generic	HTTP	Application protocol	IBM Security Guardium Data Protection for Database (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)
IBM	IBM Db2	Database	IBM Security Guardium Data Protection for Database (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)
IBM	IBM Db2 pureScale	Database	IBM Security Guardium Data Protection for Database (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)
IBM	IBM PureFlex System	Database	IBM Security Guardium Data Protection for Database (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)
IBM	IBM DB2 for i	Database	IBM Security Guardium Data Protection for Database (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)
IBM	IBM Informix	Database	IBM Security Guardium Data Protection for Database (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)
IBM	IBM PureData System for Transaction (PDTX)	Database	IBM Security Guardium Data Protection for Database (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)
IBM	IBM PureApplication System	Database	IBM Security Guardium Data Protection for Database (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)
IBM	IBM InfoSphere Optim Archival	Database Tool	IBM Security Guardium Data Protection for Database (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)
IBM	IBM Master Data Management	Database Tool	IBM Security Guardium Data Protection for Database (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)
IBM	IBM Data Stage	Database Tool	IBM Security Guardium Data Protection for Database (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)
MariaDB Foundation	MariaDB	Database	IBM Security Guardium Data Protection for Database (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)
Microsoft	MS SQL Server	Database	IBM Security Guardium Data Protection for Database (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)
Microsoft	MS SQL Server Cluster	Database	IBM Security Guardium Data Protection for Database (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)
Microsoft	Microsoft Analytics Platform System (APS)	Data Warehouse	IBM Security Guardium Data Protection for Database (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)
Oracle	Oracle Database	Database	IBM Security Guardium Data Protection for Database (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)
Oracle	Oracle Database RAC	Database	IBM Security Guardium Data Protection for Database (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)
Oracle	Oracle Sun MySQL	Database	IBM Security Guardium Data Protection for Database (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)
Oracle	Oracle Sun MySQL Cluster	Database	IBM Security Guardium Data Protection for Database (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)
PostgreSQL	PostgreSQL	Database	IBM Security Guardium Data Protection for Database (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)
SAP	SAP Sybase ASE	Database	IBM Security Guardium Data Protection for Database (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)
SAP	SAP Sybase IQ	Database	IBM Security Guardium Data Protection for Database (RVU/MVS) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Virtual Server (MVS)
SAP	SAP HANA	In-memory Database	IBM Security Guardium Data Protection for SAP HANA (RVU/MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Activated Processor Core (MAPC)
SAP	SAP HANA Appliance	In-memory Data Warehouse	IBM Security Guardium Data Protection for SAP HANA (RVU/MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MVS or RVU/MAPC)	Managed Activated Processor Core (MAPC)

In the Cloud (PaaS or SaaS)

Platform	Datasource	Licensing options	Licensing / Charge Metric	Additional notes
Database Service (DbaaS)	Examples: AWS RDS, Azure SQL, Google Cloud SQL	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)	For AWS, 1VPC : 1 MAPC For Azure, 1 vCPU: 1 MAPC For GCP and other DB services, 1 VPC : 1 MAPC
AWS	Aurora MySQL	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)
	Aurora Postgres	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)
	DynamoDB	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)	1 DynamoDB account or instance : 10 MAPC Or 100 Dynamo Component Units : 10 MAPC
	Elasticache for Redis	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)
	Fargate	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)
	RDS MariaDB	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)
	RDS MS SQL	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)
	RDS MySQL	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)
	RDS Oracle	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)
	RDS Postgres	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)
	Redshift	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)
	Snowflake	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)	8 MAPC for Large Standard Virtual Warehouse (8 credits/hr) 4 MAPC for Medium Standard Virtual Warehouse (4 credits/hr) 2 MAPC Small Standard Virtual Warehouse (2 credits/hr)
	S3	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)	1 S3 Bucket : 10 MAPC

Azure	Apache Solr	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)
	CosmosDB	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)
	MongoAtlas	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)
	MongoDB	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)
	MySQL	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)
	Postgres	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)
	Snowflake	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)	8 MAPC for Large Standard Virtual Warehouse (8 credits/hr) 4 MAPC for Medium Standard Virtual Warehouse (4 credits/hr) 2 MAPC Small Standard Virtual Warehouse (2 credits/hr)
	SQL Server	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)	1 DTU : 1 MAPC
	SQL Datawarehouse (Azure Synapse)	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)

Google Cloud	Google Cloud Apache Solr	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)
	Google Cloud PostgreSQL	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)
	Google Cloud MySQL	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)
	Google BigQuery	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)
	Google Spanner	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)
	Google Cloud Firebase	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)
	Google Cloud Firestore	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)
	Mongo Atlas	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)
	Apache Solr	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)
	MS SQL	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)
	Snowflake	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)	8 MAPC for Large Standard Virtual Warehouse (8 credits/hr) 4 MAPC for Medium Standard Virtual Warehouse (4 credits/hr) 2 MAPC Small Standard Virtual Warehouse (2 credits/hr)
	Teradata Vantage	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)
	Teradata Vantage Cloud Lake Edition	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)

IBM Cloud	DB2 / DB2 Warehouse	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)
	Elasticsearch	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)
	MongoDB	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)
	MySQL	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)
	Postgres	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)
	Redis	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)
	Netezza Performance Server	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)

Oracle	Oracle Container Services, Oracle Autonomous Database Service	IBM Security Guardium Data Protection for Database Services (RVU /MAPC) OR Cloud Pak for Security - Gen 3 / IBM Security Guardium Domain Package (RU/MAPC)	MAPC (Managed Activated Processor Core)	Oracle Cloud: 1 OCPU : 2 MAPC

Cloud deployment, supported enterprise applications for monitoring, and end of service information:

Guardium Deployment on Cloud

Guardium supports deployment on several cloud platforms.

For more information about deploying Guardium on Amazon AWS, Google, IBM Cloud, Microsoft Azure, and Oracle OCI, see Deploying Guardium in the Cloud.

For more information about deploying IBM Guardium Vulnerability Assessment on Amazon RDS, see Deploy IBM Guardium VA on Amazon RDS.

Application Monitoring

Guardium identifies potential fraud by tracking activities of users who access critical tables by using multitier enterprise applications rather than direct access to the database. This technique is especially important for applications that use connection pooling where all user traffic is aggregated within a few database connections, which masks the identity of users.

Guardium offers support for major enterprise applications (see table), and provides built-in tools to configure and add user identification for niche application and home-grown applications. Note: most applications require some basic configuration to tailor the solution to your environment.

Supported Enterprise Applications	Supported Application Server Platforms for other enterprise and custom developed applications
Oracle E-Business Suite	IBM Websphere
PeopleSoft	BEA WebLogic
Siebel	Oracle Application Server(AS)
SAP	JBoss Enterprise Application Platform
Cognos	Based on customer demand
BusinessObjects Web Intelligence	Based on customer demand

End of service information

Guardium supports database and operating system versions up to their End-of-Service (EOS), Premier, or Mainstream support end dates. For more information about IBM systems, see Software lifecycle.

For other vendors, contact your vendor representative to confirm their support end dates.

IBM offers optional extended service support after EOS. Contact your IBM representative for further information. Guardium supports the hardware system it is running on up to the End-of Marketing (EOM) date plus 5 years or end of support date, whichever is sooner.

Note: Not all functionality is available in all configurations.

Contact an IBM Security Sales Representative by using the following link: https://www.ibm.com/connect/ibm/us/en/?lnk=fcw

[{"Type":"MASTER","Line of Business":{"code":"LOB76","label":"Data Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSMPHH","label":"IBM Security Guardium"},"ARM Category":[{"code":"a8m0z000000Gp0JAAS","label":"APPLIANCE"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"11.5.0"}]

Tips

Supported Platforms and Requirements for Guardium Data Protection 11.5

Detailed System Requirements

Abstract

Content

Was this topic helpful?

Document Information

UID

Share your feedback

Need support?