Hi There,

We've considered setting Database Auto-Discovery up and would like to check with those of you that have enabled this feature to get any feedback/advise/tips please.

One of the reasons is, if I understand it correctly, it will scan thru the subnets you set up to and how 'accurate' and if it works as expected to help with the GAP analysis, etc...

Thanks in advance for your inputs !

Regards,
-Felipe

------------------------------
Felipe Boff
------------------------------

Hi Felipe,

Database discovery scans the set of IP addresses / range for open ports and detects if a database service is running on any of those open ports.  It can help you understand if there are databases running that are forgotten, or not being monitored.  You can use the results to add inspection engines for discovered databases.  It will not discover offline databases, though.

The best way to learn how well it works for you would be to run it in non-prod environment or start with one or small range of IP/port range for testing and review the results.  You can also schedule the discovery to run during off-working-hours.

------------------------------
POLLY LAU
------------------------------

Thank you, Polly !

Yes, we're trying to build a process to do our Gap analysis and checking all the possibilities... it may not be applicable to our environment as it will have to scan the subnets and we may take the route of relying on the DBA teams to publish/share their list (every month for example) so we'd run for both VA, STAP gaps... 

Thanks again !
-Felipe

------------------------------
Felipe Boff
------------------------------

Original Message:
Sent: Tue June 25, 2019 02:05 PM
From: POLLY LAU
Subject: [Guardium DAM] Database Auto-Discovery feature ?

Hi Felipe,

Database discovery scans the set of IP addresses / range for open ports and detects if a database service is running on any of those open ports.  It can help you understand if there are databases running that are forgotten, or not being monitored.  You can use the results to add inspection engines for discovered databases.  It will not discover offline databases, though.

The best way to learn how well it works for you would be to run it in non-prod environment or start with one or small range of IP/port range for testing and review the results.  You can also schedule the discovery to run during off-working-hours.

------------------------------
POLLY LAU
------------------------------