IBM Guardium

IBM Guardium

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  MS-SQL Blocking policy issue

    Posted 10/17/20 06:31 AM
    Hi,

    I have created policy in Guaridum for MS-SQL server to block the select or drop command, but while connect database itself, unable to login because many queries running in background while connecting, how can I overcome it?

    Error while login to database(created blocking policy for select &drop commands):


    Thanks,
    Panendar Rao.C

    ------------------------------
    PHANENDRA RAO CHAVANA
    ------------------------------


  • 2.  RE: MS-SQL Blocking policy issue

    Posted 10/22/20 12:29 AM
    Hi,

    Anybody can help me with my issue?

    Thanks,
    Panendar Rao.C

    ------------------------------
    PHANENDRA RAO CHAVANA
    ------------------------------



  • 3.  RE: MS-SQL Blocking policy issue

    Posted 10/26/20 09:54 AM
    If your policy is set to block for select, then it is expected. You need to refine your policy to block only on specific conditions like "DELETE" on specific group of objects.

    ------------------------------
    PRASAD Bandaru
    ------------------------------

    Original Message


  • 4.  RE: MS-SQL Blocking policy issue

    Posted 10/28/20 04:16 AM

    Looks that blocking works :)

    You must set correct conditions in policy blocking rules to approve allowed accesses.



    ------------------------------
    Zbigniew (Zibi) Szmigiero
    IBM
    Międzyrzecz
    ------------------------------



  • 5.  RE: MS-SQL Blocking policy issue

    Posted 03/25/22 12:15 PM
    have you experiences performance issue when activating the blocking policies?
    we found that apps will get very long response than usual after applying the blocking policies. It makes success rate drop below 25% as usual because so many process were dropped after apps receiving time-out.

    ------------------------------
    Murdjoko ...
    ------------------------------

    Original Message


  • 6.  RE: MS-SQL Blocking policy issue

    Posted 03/31/22 02:52 PM
    You must have very specific Sgate attach criteria.
    Trusted connections from an application should be excluded from Sgate rules.
    Blocking is most effective when only privileged users coming in from a tool like DBBeaver, Toad, or SQLPLus are interrogated

    ------------------------------
    David Summers
    djsummer@us.ibm.com
    ------------------------------

    Original Message


Related Content