IBM Guardium

IBM Guardium

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Sniffer , STAP,GIM and KTAP upgrade query

    Posted Tue July 11, 2023 02:43 AM

    Hi

    When upgrading from 10.6 to 11.3 , in addition to applying healthcheck,GPU,bundle  do I need to upgrade sniffer , STAP,GIM and KTAP also? 

    if so what are the steps please? The database we are monitoring resides on linux redhat server

    thanking you in advance



    ------------------------------
    Mohammed azher khan
    ------------------------------


  • 2.  RE: Sniffer , STAP,GIM and KTAP upgrade query

    Posted Tue July 11, 2023 08:37 AM

    Hi,

    For your appliances, once you apply the GPU, you then need to apply the most current security and sniffer patches. https://www.ibm.com/docs/en/guardium/11.4?topic=upgrade-identifying-correct-path

    For your agents, once your appliances are upgraded, upgrade your GIM/STAP/KTAP to the most current versions available for 11.3. Upgrade GIM then STAP and if necessary, the KTAP (depends on your kernel version, recommend KTAP_ALLOW_MODULE_COMBOS). https://www.ibm.com/docs/en/guardium/11.4?topic=luugiuust-linux-unix-upgrading-s-tap-agent-gim-setup-by-client



    ------------------------------
    Wendy
    Converge Technology Solutions
    Formerly Information Insights
    ------------------------------



  • 3.  RE: Sniffer , STAP,GIM and KTAP upgrade query

    Posted Wed July 12, 2023 03:48 AM

    Thank you Wendy for your prompt and detailed response - greatly appreciated.

    Apologies if an obvious answer but how does one determine KTAP to upgrade to (if at all possible) and o/s kernal certified against?

    Thank you



    ------------------------------
    Mohammed azher khan
    ------------------------------



  • 4.  RE: Sniffer , STAP,GIM and KTAP upgrade query

    Posted Wed July 12, 2023 03:52 AM
    Hi

    You can use this link to check if the K-TAP is supported for your choice of kernel release.

    Perform this procedure before upgrading your Linux operation system to determine if there is a matching K-TAP module for the new kernel level, and if not to request the K-TAP module from Technical Support.

    Then is not, you can raise a request via a case. 

    Hope that helps


    Best regards

    Mr Mark Harris






  • 5.  RE: Sniffer , STAP,GIM and KTAP upgrade query

    Posted Wed July 12, 2023 08:57 AM

    Thank you



    ------------------------------
    Mohammed azher khan
    ------------------------------