IBM Guardium

IBM Guardium

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Bandwidth necessary for Staps, collectors

    Posted 07/22/20 03:36 AM
    I have a potential user of Guardium asking for the minimum band width requirements to run the following tools in the following circumstances

    •  Minimum bandwidth to run Guardium Vulnerability Assessment.  In this case, the DB's may be in older sites that have limited network bandwidth.  What is the network bandwidth necessary to run VA?

    • Minimum bandwidth to run Guardium Data Protect.
      • Case 1  - STap(s) installed  in the older limited bandwidth environment, what is the network bandwidth necessary to communicate with the collector?
      • Case 2 - There are enough databases to warrant a collector in the limited bandwidth environment, what is the bandwidth necessary to communicate with an aggregator?

    Thanks in advance
    -John

    ------------------------------
    John Dombroski
    Security System Cybersecurity Specialist - Federal Market
    IBM
    Greenville SC
    (864) 905-5206
    ------------------------------


  • 2.  RE: Bandwidth necessary for Staps, collectors

    Posted 07/22/20 07:31 AM

    I do not have exact minimum requirements, the technical spcecs call for 1Gbs.

     

    Vulnerability Assessment runs many simple select statements against the database and database manager.

    This process could also be throttled by creating multiple small jobs versus trying to test all at once. Low bandwidth should be okay.

     

    Data Protect/Auditing can be extremely busy or a trickle depending on the servers being monitored and the policy in place.

    I would strongly recommend Case 2, the local collector. Normally a collector will export to the Aggregator once per day, but if this overwhelms the bandwidth, increase the frequency of the exports/imports. It may take some tweaking, but I believe you could obtain an acceptable level.

     

     

     

    Thank You,

     

    image002.png@01D3EDE3.96BB4210

    Jody Hair | Technical Architect – Data Security
    Mobile: 972-510-5639
    Twitter:
    @hairraiser | LinkedIn: /jdhair
    10100 Reunion Place, Suite 500, San Antonio, TX 78216
    www.siriuscom.com/ | jody.hair@siriuscom.com 

     

    This message (including any attachments) is intended only for the use of the individual or entity to which it is addressed and may contain information that is non-public, proprietary, privileged, confidential, and exempt from disclosure under applicable law or may constitute as attorney work product. If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, notify us immediately by telephone and (i) destroy this message if a facsimile or (ii) delete this message immediately if this is an electronic communication. Thank you.