List of Contributions

Zbigniew (Zibi) Szmigiero

IBM

Contact Details

IBM

My Content

1 to 20 of 50+ total

RE: Masking

Posted By Zbigniew (Zibi) Szmigiero Sun December 17, 2023 11:13 AM
Found In Egroup: IBM Security Guardium \ view thread
Hi, Guardium redaction has important limitations and I strongly suggest to review Query-Rewrite feature, especially the integration with Watson Knowledge Catalog. A lot of customer "redaction" demands can be covered by blocking rules. Could you describe your case? ------------------------------ ...

RE: Classifying a table with multiple classification

Posted By Zbigniew (Zibi) Szmigiero Thu June 01, 2023 05:06 AM
Found In Egroup: IBM Security Guardium \ view thread
Sami, G classification engine provides you a two methods of classification: - based on metadata: table, column name (not really valuable in most cases, because of false negatives) - base on content The second approach always provide you information about the table and column name where the specific ...

RE: Classifying a table with multiple classification

Posted By Zbigniew (Zibi) Szmigiero Wed May 31, 2023 03:30 AM
Found In Egroup: IBM Security Guardium \ view thread
Could you elaborate what would you like to achieve when you use a "secure the access" phrase? Blocking? You can include many classification rules in the classification process. ------------------------------ Zbigniew (Zibi) Szmigiero IBM Międzyrzecz ------------------------------

RE: De-elevating CM to Aggregator

Posted By Zbigniew (Zibi) Szmigiero Wed May 31, 2023 03:27 AM
Found In Egroup: IBM Security Guardium \ view thread
This same command store unit type standalone it will move a split-brained CM to be again an aggregator. Then you must attached it to new CM Please do it only if you centrally managed environemnt switched to another CM ------------------------------ Zbigniew (Zibi) Szmigiero IBM Międzyrzecz ...

RE: How to make secondary CM as Primary CM.

Posted By Zbigniew (Zibi) Szmigiero Fri February 10, 2023 02:24 AM
Found In Egroup: IBM Security Guardium \ view thread
You have option Make Primary CM in Central Manager view or you can execute grdapi make_primary_cm command ------------------------------ Zbigniew (Zibi) Szmigiero IBM Międzyrzecz ------------------------------

RE: SSL error in patch installation

Posted By Zbigniew (Zibi) Szmigiero Fri February 10, 2023 02:22 AM
Found In Egroup: IBM Security Guardium \ view thread
What is the current patch level? Why you try to install 405? If you on patch level 400 I strongly suggest install 9997 and 460 first. ------------------------------ Zbigniew (Zibi) Szmigiero IBM Międzyrzecz ------------------------------

RE: Guardium Failover test with Backup CM

Posted By Zbigniew (Zibi) Szmigiero Tue January 03, 2023 07:45 AM
Found In Egroup: IBM Security Guardium \ view thread
Hi Taavi, Your migration procedure makes sense. I stressed in my article to do not use CM backup for short time switch in case on primary CM unavailability and large envuronments. ------------------------------ Zbigniew (Zibi) Szmigiero IBM Międzyrzecz ------------------------------

RE: installation of third party agents

Posted By Zbigniew (Zibi) Szmigiero Mon January 02, 2023 02:11 AM
Found In Egroup: IBM Security Guardium \ view thread
There is no possibility to install additional monitoring software on Guardium appliance. Evaluate existing capabilities: SNMP, REST API to get information about appliance unit health statistics ------------------------------ Zbigniew (Zibi) Szmigiero IBM Międzyrzecz ------------------- ...

RE: MySQL is not ready

Posted By Zbigniew (Zibi) Szmigiero Fri December 23, 2022 07:39 AM
Found In Egroup: IBM Security Guardium \ view thread
Hi Carlos, I had also some issues with patch to p500 with some collectors. In this situation (if system is entitled) please open support case to identify the souce of problem. To avoid similar situations in future Be aware that patch bundles (especially GPU) requires the latest! 9997 installed ...

RE: MySQL is not ready

Posted By Zbigniew (Zibi) Szmigiero Fri December 23, 2022 07:18 AM
Found In Egroup: IBM Security Guardium \ view thread
Hi, In controlled environment this should work for small test purposes but be aware of minimal requirements is 24 GB RAM (34 for some functionalities) Also minimum 6vcpu in case of using UC. In my opinion if problem with MySQL happened after a while (not an issue visible just after collector ...

RE: MySQL is not ready

Posted By Zbigniew (Zibi) Szmigiero Fri December 23, 2022 02:12 AM
Found In Egroup: IBM Security Guardium \ view thread
not operational MySQL backend is critical issue It can be related to many situations: hard reboot, filesystem issue Could you provide me information about resources attached to this collector - vcpu, ram? ------------------------------ Zbigniew (Zibi) Szmigiero IBM Międzyrzecz ------- ...

RE: set guiuser - incorrect password after upgrade to 11.4

Posted By Zbigniew (Zibi) Szmigiero Thu December 22, 2022 08:44 AM
Found In Egroup: IBM Security Guardium \ view thread
Try synchronize authentication setting on collector from CM again. ------------------------------ Zbigniew (Zibi) Szmigiero IBM Międzyrzecz ------------------------------

RE: No access to IBM Guardium web interface

Posted By Zbigniew (Zibi) Szmigiero Fri December 16, 2022 01:42 PM
Found In Egroup: IBM Security Guardium \ view thread
Try restart GUI from cli restart gui restart stopped_services ------------------------------ Zbigniew (Zibi) Szmigiero IBM Międzyrzecz ------------------------------

RE: Guardium S-TAP Control

Posted By Zbigniew (Zibi) Szmigiero Fri May 28, 2021 06:07 AM
Found In Egroup: IBM Security Guardium \ view thread
Nope Pozdrawiam / Best Regards Zbigniew Szmigiero, Data Security Specialist - IBM Security (EMEA) Software Group, IBM e-mail : zszmigiero@pl.ibm.com blog: https://guardiumnotes.wordpress.com Mobile phone : +48 691360623 Short: 5333 IBM Polska Sp. z o.o. ul. Krakowiaków 32 02-134 Warszawa ...

RE: Guardium S-TAP Control

Posted By Zbigniew (Zibi) Szmigiero Fri May 28, 2021 03:35 AM
Found In Egroup: IBM Security Guardium \ view thread
Dobri, You can add more than one failover collector. In this case the arrows provide you possibility to set the priority order of switching. BTW you cannot set failover above actually active one. ------------------------------ Zbigniew (Zibi) Szmigiero IBM ------------------------------

RE: Guardium Collector - Data Purge through CLI

Posted By Zbigniew (Zibi) Szmigiero Fri May 28, 2021 02:45 AM
Found In Egroup: IBM Security Guardium \ view thread
Check out this: https://www.ibm.com/support/pages/my-guardium-appliance-full-and-gui-down-how-can-i-purge-data-my-appliance ------------------------------ Zbigniew (Zibi) Szmigiero IBM ------------------------------

RE: Guardium S-TAP Control

Posted By Zbigniew (Zibi) Szmigiero Fri May 28, 2021 02:44 AM
Found In Egroup: IBM Security Guardium \ view thread
In addition to Phanendra answer. You can use ELB functionality if you implemented Central Manager. In this case CM will provide to STAP information about preferred failover collector. ------------------------------ Zbigniew (Zibi) Szmigiero IBM ------------------------------

RE: Object Name in LEEF Sys Log

Posted By Zbigniew (Zibi) Szmigiero Fri May 28, 2021 02:42 AM
Found In Egroup: IBM Security Guardium \ view thread
Hi, You can modify event content. Here list of available variables: The alert message template Ibm remove preview The alert message template Message templates determine the content of alerts. You can create multiple message templates from the Global Profile, ...

RE: How can I exclude Oracle schemas in a Policy rule ?

Posted By Zbigniew (Zibi) Szmigiero Wed May 26, 2021 03:33 AM
Found In Egroup: IBM Security Guardium \ view thread
Hi Stephanie, Would you like exclude set of schemas from monitoring or from classification policy? I assume first situation. Oracle object reference has syntax "schema.table" so you can exclude some schemas using OBJECT field in the policy and provide definition using wild character: ...

RE: Guardium GIM Ports 8445/8446 - Telnet Tests

Posted By Zbigniew (Zibi) Szmigiero Fri May 14, 2021 01:38 AM
Found In Egroup: IBM Security Guardium \ view thread
Please differentiate communication sides: GIM server (located on Guardium appliance) opens ports 8081, 8444, 8446 GIM client (where you install GIM) opens port 8445 (or specified during installation) only in case of LISTENER mode. If you installed GIM in the listener mode you need ...