IBM Support

System Requirements for IBM InfoSphere Guardium v8.2

Detailed System Requirements


This techdoc summarizes the recommended hardware for IBM InfoSphere Guardium v8.2 and the databases and platforms supported by InfoSphere Guardium v8.2


These are the Guardium products related to the specifications: Database Activity Monitor; Advanced Compliance Workflow Automation; Enterprise Integrator; Vulnerability Assessment, Entitlement Reports, Data-Level Access Control; and, Central Manager and Aggregator.

Cross-Platform Security

Guardium’s cross-platform solution is ideal for heterogeneous environments because it supports all major DBMS platforms and protocols running on all major operating systems.

This table shows all currently supported platforms and versions.

Supported PlatformSupported Versions
Oracle8i, 9i, 10g (r1, r2), 10g RAC,11gR1, 11gR2, 11g RAC
Oracle (ASO, SSL)9i, 10g (r1, r2), 11gR1, 11gR2
Oracle Exadata11gR2
Microsoft SQL ServerMS SQL Cluster, 2000, 2005, 2005 x64, 2005 IA64,
2008, 2008 x64, 2008 IA64, 2008 R2 x64/x32/Cluster, 2012
Microsoft SharePoint2007, 2010
IBM DB2 (Linux, Unix, Linux for System z)9.1, 9.5, 9.7
IBM DB2 (Windows)9.1, 9.5, 9.7
IBM DB2 Purescale9.8
IBM DB2 for z/OS8.1, 9.1, 10.1
IBM DB2 for iSeriesV5R2, V5R3, V5R4, V6R1
IMS9, 10,11,12
VSAMsee OS version support, part of z/OS (not separately versioned)
IBM Informix7, 9, 10, 11, 11.50, 11.70
Sun MySQL and MySQL Cluster4.1, 5.0, 5.1, 5.5
Sybase ASE12, 15, 15.5, 15.7 (15.7, not AIX)
Sybase IQ12.6, 12.7, 15
IBM NetezzaNPS 4.5, 4.6, 5,0, 6.0, 6.02, 7.0
PostgreSQL8, 9, 9.03, 9.04
Teradata6.x, 12, 13, 13.10, 14
Window File Share (WFS)Windows 2003, 2008

Host-Based Monitoring

Unique in the industry, S-TAPs are lightweight software probes that monitor both network and local database protocols (shared memory, named pipes, etc.) at the OS level of the database server. S-TAPs minimize any effect on server performance by relaying all traffic to separate Guardium appliances for real-time analysis and reporting, rather than relying on the database itself to process and store log data. S-TAPs are often preferred because they eliminate the need for dedicated hardware appliances in remote locations or available SPAN ports in your data center.

This table shows all OS platforms and versions for which S-TAPs are currently available.
Note for Linux, Guardium v8.2 does NOT support kernels of 2.6.33 and higher.

OS TypeVersion32-Bit & 64-Bit
AIX5.2, 5.3Both
(Note: DB2 SHM and Informix SHM on 32-bit AIX not supported)
6.1, 7.164-Bit
z/OS1.11 or higher
HP-UX11.11, 11.23, 11.31Both
Red Hat Enterprise Linux3, 4, 5,6Both
Red Hat Enterprise Linux for System z5.4
SUSE Enterprise Linux9, 10, 11Both
SUSE Enterprise Linux for System z9, 10, 11
Solaris - SPARC8, 9, 10, 11Both
Solaris - Intel/AMD10, 1110-Both, 11-64-Bit only
Tru645.1A, 5.1B64-Bit
Windows2000, 2003, 2008, 2012Both
* Supports network activity monitoring, local activity support via Enterprise Integrator

End of Service

Guardium supports database and operating system versions up to their End-of-Service (EOS), Premier, or Mainstream support end dates. For IBM, they are published in for IBM. For other vendors, please contact your vendor representative to confirm their support end dates. IBM offers optional extended service support after EOS. Please contact your IBM representative for further information. Guardium will support the hardware system it is running on up to the End-of Marketing (EOM) date plus 5 years or end of support date, whichever is sooner.

Flexible Deployment

Guardium is available as a hardware or software offering, ensuring the solution can be easily deployed in a wide variety of environments. As a hardware offering, the solution is delivered with licensed software fully loaded and tested on a physical appliance provided by IBM (hardware appliance), When delivered as a software offering, the solution is delivered as software images ready to be deployed by the user on their own hardware (software appliance), either directly or as virtual appliances. While the software images can be installed on any VMware product, the VMware ESX server is the recommended platform for a virtual solution.

The following table summarizes major hardware requirements for software appliances. The Guardium solution is designed to work on Intel-based platforms with Xeon processors. Only platforms and hardware that are officially supported by RedHat Linux 5.8 can be used as Guardium platforms, however, not all officially supported RedHat Linux 5.8 platforms can be used. Platforms that require additional drivers or specialized post-install configuration are not supported at this time.

Recommended Resources per software/virtual appliance

ResourceRequired Range*Comments
Physical CPUs4-16 coresIntel XEON processors required
Virtual CPUsMinimum 4 vCPUs
RAM 8-16 GBFor virtual, initial value must be 8 GB. If virtual customers want to work outside the required range, consult with Guardium Technical Support.
Ports (NICs)

1 Gbit per second card recommended

1-4Each port can be an actual NIC, or a virtual switch that can be configured to use multiple NICs, optionally with failover IP teaming.

Optional: The third port may also be configured to team with the primary interface in order to provide failover IP teaming. Alternatively, the last port on the device may be configured as a secondary management interface with a different IP, NETMASK and GW from the primary.

When using Inspection Engines to capture traffic (not
S-TAPs) on software appliances, additional ports may be required. Note that this collection method is not applicable for virtual appliances.

Disk Size300 GB to 1 TBUsing RAID is recommended.

RAID-0, RAID-1, RAID 0+1, RAID 1+0 are supported.

Note: Larger disks may hold more audit records for longer periods of time, but are more likely to impact performance.

If customers want to work outside the required range, consult with Guardium Technical Support.

Disk Speed7200 RPM to 15,000 RPMWith 7200 RPM, scale back the sizing ratio by 70%
DVD Drive1
* Refer to IBM x2000 high end configuration table for physical ranges (See Software Appliance 8.2 Technical Requirements)

Application Monitoring

Guardium identifies potential fraud by tracking activities of end-users who access critical tables via multi-tier enterprise applications rather than direct access to the database. This is required because enterprise applications typically use an optimization mechanism called connection pooling. In a pooled environment, all user traffic is aggregated within a few database connections that are identified only by a generic application account name, thereby masking the identity of end-users.

We support application monitoring for all major off-the-shelf enterprise applications. Support for other applications, including in-house applications, is provided by monitoring transactions at the application server level.

This table shows all enterprise applications for which out-of-the-box support is provided, as well as all application server platforms that are supported.

Supported Enterprise ApplicationsSupported Application Server Platforms
(for other enterprise & custom developed applications)
Oracle E-Business SuiteIBM WebSphere
PeopleSoftBEA WebLogic
SiebelOracle Application Server (AS)
SAPJBoss Enterprise Application Platform
Cognos+ Others based on customer demand
Business Objects Web Intelligence
+ Others based on customer demand

Original Publication Date

19 August 2011

[{"Product":{"code":"SSMPHH","label":"IBM Security Guardium"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"--","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF010","label":"HP-UX"},{"code":"PF016","label":"Linux"},{"code":"PF027","label":"Solaris"},{"code":"PF033","label":"Windows"},{"code":"PF035","label":"z\/OS"}],"Version":"8.2","Edition":"All Editions","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
16 July 2018