IBM Support

Release of Guardium Data Protection Windows S-TAP 11.4.0.479

Release Notes


Abstract

This technical note provides guidance for installing IBM Guardium Data Protection Windows Agents 11.4.0.479, including any new features or enhancements, resolved or known issues, or notices associated with the patch.

Content

Patch information
Product: IBM Guardium
Release version: Guardium 11.4 Windows S-TAP
Completion date: 17 March 2025
Fix IDs
Guardium_11.4.0.479_S-TAP_Windows
Finding the patch
  1. Select the following options to download this patch on the IBM Fix Central website and click Continue.
    • Product selector: IBM Security Guardium
    • Installed Version: 11.0
    • Platform: Windows
  2. On the "Identify fixes" page, select Browse for fixes and click Continue.
  3. On the "Select fixes" page, select Database Agent (STAP, GIM and CAS). Then, enter the patch information in the Filter fix details field to locate the patch.
When to reboot after installing or upgrading to Guardium 11.4 Windows S-TAP
  • A fresh install of Guardium 11.4 does not require a reboot.
  • When you upgrade between versions, you must reboot the database server to update the NmpProxy driver. If there are no issues with your current NmpProxy functionality, you can delay the reboot until the next maintenance cycle. No fixes will be applied to the NmpProxy driver until a server reboot is completed.
  • IBM strongly recommends that you do not use the following builds as they contain instabilities that can lead to system failure. Uninstall these builds and reboot before you install S-TAP 11.4. For all other builds, you can upgrade as usual.
    • 11.4.0.168 through 11.4.0.204
    • 11.3.0.257 through 11.3.0.287
Deprecated support and functionality
Microsoft Windows Server 2012 and 2012 R2 
Windows Server 2012 and 2012 R2 reached end of support by Microsoft on 10 October 2023 and no longer receive security updates. For this reason, as of 31 March 2024, Guardium no longer maintains support for these operating systems. For more information, see IBM Guardium support discontinuance notification for Microsoft Windows Server version 2012 and 2012 R2.
Microsoft SQL Server 2012 
Guardium no longer supports Microsoft SQL Server 2012 as of 12 July 2022. For more information, see IBM Guardium support discontinuance notification for Microsoft SQL Server version 2008 and 2012.
Known issues and workarounds
Issue key
Description
GRD-91681
TCP traffic might not be captured by Windows S-TAP after server restart. If that occurs, the workaround is to:
1.    Stop the S-TAP service.
2.    Change the S-TAP service type to be Automatic (Delayed Start).
3.    Start the S-TAP service.
GRD-95833
S-TAP parameters cannot be updated when a S-TAP is using version 8 protocol, scrub policy is triggered by IBM Db2 shared memory, and DB2_TAP_INSTALLED=1
Workaround: Stop the database before updating the parameters as needed. When upgrading S-TAP, Db2 should also be stopped to avoid issues with the upgrade.
Resolved issues
Patch
Issue key Summary Known issue (APAR)
11.4.0.447
See release note for Windows S-TAP 11.4.0.447.
11.4.0.479
GRD-84608
Fixed an S-TAP instability when using protocol 8 and DB-TYPE value is specified in lowercase.
DT431890
GRD-85678
Added GUARDIUM_CA_PATH and SQLGUARD_CERT_CN parameters to guard_tap.ini and  GIM setup by client.
DT416618
GRD-88033 Added separate event handles to notify S-TAP when 64-bit and 32-bit database processes start. DT416655
GRD-88200
Fixed an instability in Microsoft SQL Server instance due to the Correlator Proxy dynamic-link library (DLL). You must reboot the database server to update the Correlator Proxy DLL.
DT398828
GRD-89466
Prevent S-TAP instability by ignoring empty traffic messages.
DT417031
Installers with MD5Sums
MD5Sum File Name
7085e0ef509bfc0dd68755de5a9d1f81
Windows-STAP-V11.4.0.479.zip
df72798e08bfcc43c60b919e74591e43
conf.reload.WINSTAP
7f067806a8f588c8240301eb270ee125
guard-WINSTAP-11.4_r110400479_1-x86_x64.gim
6e8cdc71e09e35ca915fea7db819fba2
guard-WINSTAP-guardium_11.4_r110400479_1-Windows-Server-Windows-x86_x64.exe.signed
Related Guardium updates
Guardium Data Protection Windows GIM 11.4.0.479 (see release note)

[{"Type":"MASTER","Line of Business":{"code":"LOB76","label":"Data Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSMPHH","label":"IBM Security Guardium"},"ARM Category":[{"code":"a8m3p000000PCTuAAO","label":"Platform\/Installation\/Deployment"},{"code":"a8m0z000000Gp0IAAS","label":"STAP"}],"ARM Case Number":"","Platform":[{"code":"PF033","label":"Windows"}],"Version":"11.4.0"}]

Document Information

Modified date:
16 May 2025

UID

ibm17185689