IBM Guardium

IBM Guardium

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Catch commands under app instead command

    Posted 05/26/26 05:22 PM

    Hi All

    I made some policies to monitor (block in same cases) certain commands, like Grant DBA, but when users use command line, the rules works fine, but when they use (under Oracle) Toad or Management Studio (under Windows), the rules don't work.

    Does anybody have the same situation?

    Regards,



    ------------------------------
    Carlos Espinoza Chandia
    ------------------------------


  • 2.  RE: Catch commands under app instead command

    Posted 05/27/26 09:39 AM

    Hello Carlos,

    I have seen cases when a database session is created and a SQL command is immediately executed; there is no time for Guardium to act on the SQL. Perhaps this is a timing issue. A difference between using command line and tools. You may need to play with Guardium FIREWALL parameters:

    https://www.ibm.com/docs/en/gdp/12.x?topic=parameters-windows-firewall

    Hope this helps.

    Marcio



    ------------------------------
    Marcio Bulek
    Senior Consultant, Data Protection
    Converge Technology Solutions
    Miami FL
    786-897-9323
    ------------------------------



Related Content