hi,

What are the S-Tap parameters to install for Windows based Servers for blocking, masking(redaction) and Quarantine?
Could you share the link to gain knowledge about S-TAP parameters and usage of those?

Thanks,
Panendar Rao.C

------------------------------
PHANENDRA RAO CHAVANA
------------------------------

Hi Phanendra,

In order to turn on blocking / redact / quarantine actions for Windows STAP, we need to enable the WINSTAP FIREWALL parameters.  To enable winstap blocking capabilities, you need to set FIREWALL_INSTALLED = 1.  For a full list of other firewall parameter options, you can see here:

https://www.ibm.com/support/knowledgecenter/en/SSMPHH_11.2.0/com.ibm.guardium.doc.stap/stap/r_stapparmsw_firewall.html

Note that the firewall parameter is just the first step.  Depending on your firewall parameter options, you may need to set appropriate attach/detach policy rules before blocking actions.  You can see the blocking policy rule actions here:
https://www.ibm.com/support/knowledgecenter/en/SSMPHH_11.2.0/com.ibm.guardium.doc/protect/policy_rule_actions_blocking.html

Hope this helps.

Polly

------------------------------
POLLY LAU
------------------------------

Original Message:
Sent: Mon September 28, 2020 12:39 AM
From: PHANENDRA RAO CHAVANA
Subject: IBM Guardium Windows OS - Parameters

hi,

What are the S-Tap parameters to install for Windows based Servers for blocking, masking(redaction) and Quarantine?
Could you share the link to gain knowledge about S-TAP parameters and usage of those?

Thanks,
Panendar Rao.C

------------------------------
PHANENDRA RAO CHAVANA
------------------------------