IBM Security Guardium

 View Only
  • 1.  Guardium Encryption DSM Failover

    Posted Wed August 19, 2020 02:00 AM
    Edited by vijay jamwal Wed August 19, 2020 02:19 AM
    Hello Security Team,

    I have a question on DSM Failover/FailBack.

    I saw in one of the "GDE Installation/Registration" video that there is no option to give Secondary DSM IP  while registration of the agent.
    So in HA environment how does FailOver/FailBack take place. Does this happen automatically or this is a Manual process?

    It would be great if someone can help with flow of Failover/Failback between DSM OR if you could share a document on same.

    Thanks,
    Vijay SIngh Jamwal



    ------------------------------
    Vijay Singh Jamwal
    ------------------------------


  • 2.  RE: Guardium Encryption DSM Failover

    Posted Thu August 20, 2020 03:12 AM

    Agent receives list of DSM from his primary DSM. So there is no need to define a list of DSM's on agent level manually

    There is possibility to attach agent to any DSM as his primary one



    ------------------------------
    Zbigniew (Zibi) Szmigiero
    IBM
    Warsaw
    ------------------------------



  • 3.  RE: Guardium Encryption DSM Failover

    Posted Thu August 20, 2020 11:36 AM
    Hi Vijay,

    Up to DSM v6.1, the HA is setup Primary-Failover and from v6.2+ HA is active-active.

    The way VTE agent communication goes is it usually has the primary/preferable Node to connect to and for:
    1) up to v6.1.: if Primary node goes down, the agents should be able to communicate with Failover node but you may need to convert it to Primary.
    2) v6.2: if Node1 (former Primary) goes down, the agents should be able to communicate with Node2 and no changes should be required unless you wish to have the agents registered to Node2 and, in that case, you need to unregister/re-register them accordingly.

    I hope that helps...

    Thank you!
    -Felipe

    ------------------------------
    Felipe Boff
    ------------------------------



  • 4.  RE: Guardium Encryption DSM Failover

    Posted Sun August 23, 2020 11:35 PM
    Thanks, Felipe
    That helped



    ------------------------------
    vijay jamwal
    ------------------------------