IBM Security Guardium

 View Only
  • 1.  Guardium Inspection Engines

    Posted Wed September 16, 2020 07:57 AM
    hi,

    We have many parameters in Inspection Engines tab- So what are the options are the best practice to disable and also collector should monitor all data and should be able to utilize all types of policies(access, extrusion and exceptions).

    Thanks,
    Panendar Rao.C

    ------------------------------
    PHANENDRA RAO CHAVANA
    ------------------------------


  • 2.  RE: Guardium Inspection Engines

    Posted Thu September 17, 2020 03:27 AM

    Assume that default options suit most cases.

    Sometimes you must modify something but for specific cases like setting VIP addresses.



    ------------------------------
    Zbigniew (Zibi) Szmigiero
    IBM
    Międzyrzecz
    ------------------------------



  • 3.  RE: Guardium Inspection Engines

    Posted Thu September 17, 2020 04:29 AM
    That can be a complex topic Phanendra. Typically the default values under Manage > Activity Monitoring > Inspection Engines work well for most customers. The full doc is here:

    https://www.ibm.com/support/knowledgecenter/SSMPHH_11.1.0/com.ibm.guardium.doc.admin/config/inspection_engine_configuration.html

    Some settings, like Log Records Effected can have a performance hit, as described in the doc above. You need to balance this with your audit requirements.

    ------------------------------
    John Adams
    ------------------------------



  • 4.  RE: Guardium Inspection Engines

    Posted Thu September 17, 2020 04:55 AM
    hi,

    Thank you so much.

    Thanks,
    Panendar Rao.C

    ------------------------------
    PHANENDRA RAO CHAVANA
    ------------------------------