IBM Guardium

IBM Guardium

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  External S-TAP deployment in Cloud Linux Machine

    Posted Tue October 06, 2020 08:04 AM

    hi,

    If we are installing External S-tap in AWS Cloud linux machine using deployment script downloaded from github,
    Before that, do we need to install docker image in AWS Cloud linux machine?
    If it is, how to install it?
    I have the script from docker website(docker pull store/ibmcorp/guardium_external_s-tap:v11.2.0.137), so if we just use that, will that install docker configurations?
    Once External S-Tap is done, How can we give parameters in Guardium GUI?
    Because I can see parameters for AWS EKS based installation in Guardium GUI

    Could anyone help me for above issues and provide detailed steps to do it?


    Thanks,
    Panendar Rao.C

    ------------------------------
    PHANENDRA RAO CHAVANA
    ------------------------------


  • 2.  RE: External S-TAP deployment in Cloud Linux Machine

    Posted Tue October 06, 2020 12:14 PM
    Here is are a few resources that may help:

    - External S-TAP deployment on AWS clusters course: https://www.securitylearningacademy.com/course/view.php?id=5348
    - Deploying the external S-TAP on an AWS EKS cluster document: https://supportcontent.ibm.com/support/pages/sites/default/files/inline-files/$FILE/External_STAP_Deployment_AWS_EKS.pdf  
    and companion video: https://www.youtube.com/watch?v=etD_I8ngT_Y

    ------------------------------
    Leila Johannesen
    ------------------------------



  • 3.  RE: External S-TAP deployment in Cloud Linux Machine

    Posted Wed October 07, 2020 06:00 AM
    hi Leila,

    Thanks for your information. Below is the screenshot which doesn't cover in that video and could you suggest me what are the parameters need to give?
    Is there any document to deploy External S-Tap in Linux machine that runs docker?



    Thanks,
    Panendar Rao.C


    ------------------------------
    PHANENDRA RAO CHAVANA
    ------------------------------



  • 4.  RE: External S-TAP deployment in Cloud Linux Machine

    Posted Wed October 07, 2020 12:16 PM
    Edited by Leila Johannesen Wed October 07, 2020 12:17 PM
    In the second video (companion video) above, it covers what goes in the secret field: it is the TOKEN from  CLI command of creating  external_stap certificate in the guardium machine.
    You can find the TOKEN by using CLI command   >show certificate external_stap

    ------------------------------
    Leila Johannesen
    ------------------------------



  • 5.  RE: External S-TAP deployment in Cloud Linux Machine

    Posted Thu October 08, 2020 02:22 AM
    I think using Kubernetes will be much more convenient. You can use an article below for the starting point.

    https://guardiumnotes.wordpress.com/2020/08/

    ------------------------------
    Sincerely,
    Alexey Saltovski
    Tech Department Manager
    Tangram-Soft LTD
    Israel

    IBM Champion
    ------------------------------