IBM Security Guardium

 View Only
  • 1.  IBM Guardium Installation Type

    Posted Sun April 25, 2021 07:29 AM

    Hi ,

    I want to know about the different type of installations available in appliance.

    Standard Installation (non CM) NM_Setup
    Custom Partition Installation (Graphical Mode)
    Aggregator or Central Manager (CM) NM_setup
    Custom Partitioned Aggregator or Central Manager (CM)

    Which installation would be best suitable for which type of installation either for single datacenter / how many number of which databases are supported by which installation type.

    BR,
    Ather



    ------------------------------
    Ather Mobeen
    ------------------------------


  • 2.  RE: IBM Guardium Installation Type

    Posted Mon April 26, 2021 03:10 AM
    Hi,

    You should use only below two options:
    Standard Installation (non CM) NM_Setup - used to install only collector
    Aggregator or Central Manager (CM) NM_setup -
    Used to install only Aggregator and you can elevate to CM using command (store unit type manager) and de-elevate (delete unit type manager)

    Note: only Second option used to elevate to CM.

    Databases integration depends upon the licenses you procure from IBM. If you give database details (Database type, Database Version, OS type and OS version) to IBM sales person, they will comeback with how many collectors you need for your environment and how many databases to be integrated per collector

    More over please find the below link to checking DB supported link:

    https://www.securitylearningacademy.com/mod/data/view.php?id=19457&mode=&search=&advanced=1

    Linux Kernel supported match link:

    https://www.securitylearningacademy.com/mod/data/view.php?id=20751&mode=&search=&advanced=1

    Thanks,
    Panendar Rao.C



    ------------------------------
    PHANENDRA RAO CHAVANA
    ------------------------------



  • 3.  RE: IBM Guardium Installation Type

    Posted Wed April 28, 2021 04:02 AM
    Edited by Jonathan LU Wed April 28, 2021 04:05 AM
    I suppose you can refer to "Sizing" section in https://higherlogicdownload.s3-external-1.amazonaws.com/IMWUC/Guardium%20architecture%20and%20deployment_Master%20Skills.pdf?AWSAccessKeyId=AKIAVRDO7IEREB57R7MT&Expires=1619600431&Signature=KD%2FnyU7eZyRNLoEZi1gHM6CnIwo%3D. Hope it helps.

    ------------------------------
    Jonathan LU
    Security Support Engineer
    IBM
    Australia
    ------------------------------


  • 4.  RE: IBM Guardium Installation Type

    Posted Mon April 26, 2021 05:00 AM
    Hi,

    Thanks for the feedback and sharing the links.

    Kindly let me know if the standard installation is feasible for installing on 4 databases mentioned below without installing any central manager / aggregator.

    1) Microsoft SQL Server 2014 
    2) Microsoft SQL Server 2014 
    3 ) Oracle 12c 12.1
    4) Oracle 12c 12.2


    ------------------------------
    Ather Mobeen
    ------------------------------



  • 5.  RE: IBM Guardium Installation Type

    Posted Mon April 26, 2021 10:02 AM
    Hi Ather,

    You can do it. You can install only one collector, but you must be carefull in what you can monitor, not all logs you can be registered. Other factor is the transaccionallity of the DB, this factor is very important because the DB of collector could be full in one day and you must be purge data. If you need save logs for more time, you need an aggregator/CM.
    The recommended collector for this enviroment is 32GB RAM 8 cores and 1TB of disk (2TB better).
    I have one collector with 1TB and two Oracle cluster serves and this collector support one day, then I export data to the aggregator for more days of data. But I have other collector with 6 servers, this collector register only the DBAs activities, in this collector we save data to a fileserver everyday and purge information, this allows us 2 months in the collector.

    ------------------------------
    Carlos Espinoza Chandia
    ------------------------------



  • 6.  RE: IBM Guardium Installation Type

    Posted Wed May 05, 2021 04:08 AM
    Thanks for the clarification Carlos.

    ------------------------------
    Ather Mobeen
    ------------------------------