IBM Guardium

IBM Guardium

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Encryption on Cluster DB

    Posted 11/26/20 12:44 AM
    Hi Security Team,

    How can we do VTE encryption for Cluster SQL/Oracle in Active/Passive state. Is the process remain same as it is with standalone?
    What in case if the the storage is also in cluster environment

    Please suggest the steps if the process is different.

    Thanks,


  • 2.  RE: Encryption on Cluster DB

    Posted 11/26/20 02:45 AM

    Hi Vijay,

    It is doable. There is difference between MS Cluster and HACMP on AIX.
    Does Active/Passive mean that the storage is also reassigned between nodes?



    ------------------------------
    Zbigniew (Zibi) Szmigiero
    IBM
    Międzyrzecz
    ------------------------------



  • 3.  RE: Encryption on Cluster DB

    Posted 11/26/20 03:39 AM
    Hi Zibi

    This is on MS Cluster. Yes storage is being shared in cluster. One goes down other takes the responsibility

    Regards,

    ------------------------------
    vijay jamwal
    ------------------------------

    Original Message


  • 4.  RE: Encryption on Cluster DB

    Posted 11/26/20 08:50 AM
    Hi Zibi,

    Hi have reached you over email. Could you please share the relevant docs on this.

    Thanks,
    Vijay

    ------------------------------
    vijay jamwal
    ------------------------------

    Original Message


  • 5.  RE: Encryption on Cluster DB

    Posted 01/11/21 09:37 AM
    Hi Zibi, Thanks for the document! It was helpful

    I was able to sequence the action plan to encrypt this cluster but got another angle to it, Need another help on this..

    This cluster setup has multiple IPs involved...so I am confused with agent behavior of agent in cluster environment.

    1> Incoming/Outgoing Traffic is different for this cluster.
    2> Outgoing request from DB will go through the Local/Physical IP
    3> Incoming request will go through the Virtual IP
    5> All the components are in different Vlan, Security Zone.

    As far as I know, GDE agent is registered with single IP with DSM. Please help in understand how GDE Agent will behave in this situation also if you could help with implication.

    Thanks,
    Vijay

    ------------------------------
    vijay jamwal
    ------------------------------

    Original Message


Related Content