IBM Security Guardium

Expand all | Collapse all

Guardium Inspection Engines

  • 1.  Guardium Inspection Engines

    Posted 7 days ago
    hi,

    We have many parameters in Inspection Engines tab- So what are the options are the best practice to disable and also collector should monitor all data and should be able to utilize all types of policies(access, extrusion and exceptions).

    Thanks,
    Panendar Rao.C

    ------------------------------
    PHANENDRA RAO CHAVANA
    ------------------------------


  • 2.  RE: Guardium Inspection Engines

    Posted 6 days ago

    Assume that default options suit most cases.

    Sometimes you must modify something but for specific cases like setting VIP addresses.



    ------------------------------
    Zbigniew (Zibi) Szmigiero
    IBM
    Międzyrzecz
    ------------------------------



  • 3.  RE: Guardium Inspection Engines

    Posted 6 days ago
    That can be a complex topic Phanendra. Typically the default values under Manage > Activity Monitoring > Inspection Engines work well for most customers. The full doc is here:

    https://www.ibm.com/support/knowledgecenter/SSMPHH_11.1.0/com.ibm.guardium.doc.admin/config/inspection_engine_configuration.html

    Some settings, like Log Records Effected can have a performance hit, as described in the doc above. You need to balance this with your audit requirements.

    ------------------------------
    John Adams
    ------------------------------



  • 4.  RE: Guardium Inspection Engines

    Posted 6 days ago
    hi,

    Thank you so much.

    Thanks,
    Panendar Rao.C

    ------------------------------
    PHANENDRA RAO CHAVANA
    ------------------------------