IBM Guardium

IBM Guardium

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  SAP HANA Integration with Guardium

    Posted Tue December 19, 2023 09:58 AM

    Hi Team,

    We are having SAP HANA which is running on thre CentOS. We have installed and configured GIM and STAP agents.

    Agent is running under STAP control in collector but inspection engine is not doscovered.

    I had run the discovery from the STAP control but no luck. I am also trying to add the inspection engine manually but its turn it on orange . It seems i am missing some values in the inspection engine configuration . 

    Is anyone integrated SAP HANA. Please provide your advice. ThANK yoU.

    dJAY



    ------------------------------
    jo De
    ------------------------------


  • 2.  RE: SAP HANA Integration with Guardium

    Posted Tue December 19, 2023 11:28 AM

    Hello jo,

    I have the following parameters:

    Protocol: Sap Hana    Port Range: 3015-3015

    DB-Real port: 3015    Ip: 0.0.0.0    Mask 0

    Connect to Ip: 127.0.0.1   Db User: NULL

    DB Install dir: /usr/sap     Process Name and Identifier: HANA_<IP_SERVER>(3005,3005,DB_0)

    DB Version: 7

    Be sure that the following options are On:

    KTAP_ALLOW_MODULE_COMBOS in Y; KTAP_ENABLED in 1 and STAP_BUFFER_FILE_SIZE in 250 or more (Normally the buffer is in 50 and it is low for HANA).

    Regards,



    ------------------------------
    Carlos Espinoza Chandia
    ------------------------------

    Original Message


  • 3.  RE: SAP HANA Integration with Guardium

    Posted Wed December 20, 2023 05:59 AM

    Hi Carlos,

    Thank you for your prompt response.

    I changed the details as per your instruction.

    Protocol: Sap Hana    Port Range: 32141-32141

    DB-Real port: 32141    Ip: 0.0.0.0    Mask 0

    Connect to Ip: 10.x.x.x   Db User: NULL

    DB Install dir: /usr/sap     Process Name and Identifier: HANA_10.x.x.x(32141,32141,DB_0)

    Then i have enabled the parameter like you mentioened(atatched) but i can the error under STAP events "cant Initilize PCAP"

    Kindly check and advice.

    Thanks



    ------------------------------
    jo De
    ------------------------------

    Original Message


  • 4.  RE: SAP HANA Integration with Guardium

    Posted Wed December 20, 2023 08:14 AM

    Hi jo:

    Review this page for info about the error:

    https://www.ibm.com/support/pages/how-enable-pcap-capture-network-traffic-using-guardium-s-tap

    You can change the parameters from the Install GIM aggregator using the following parameters: STAP_DEVICES and STAP_KTAP_LOCAL_TCP.

    Hope this help.

    Regards,



    ------------------------------
    Carlos Espinoza Chandia
    ------------------------------

    Original Message


Related Content