IBM Guardium

IBM Guardium

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  put requests on hold until we approve them in Guardium

    Posted Fri May 12, 2023 06:12 AM
    Reply
    Hello,

    I would like to know if there is a method to put requests (not all but some) on hold until we approve them in Guardium.

    many thanks,

    Amine MIRAT


    ------------------------------
    cherbani samir
    ------------------------------


  • 2.  RE: put requests on hold until we approve them in Guardium

    Posted Thu May 18, 2023 04:18 AM
    Reply

    Hi Cherbani,

    can you provide any scenario?

    For example, you can create an ACCESS rule and define a group of users allowed to connect to Database and in rule action define SGATE TERMINATE.
    If the database user doesn't exist in that group, Guardium will not allow that user to connect to DB at all.
    Guardium Admin will have to update this user group and add the new users and reinstall the policy.

    Hope this help!



    ------------------------------
    Regards,
    Rizwan Ali
    Senior Guardium Consultant
    Pakistan
    ------------------------------

    Original Message


  • 3.  RE: put requests on hold until we approve them in Guardium

    Posted Thu May 18, 2023 07:26 AM
    Reply

    Hello Rizwan,
    Thank you for your answer.
    I think my question is misunderstood, I would like to give you an example so that you can understand. If a user executes a command (DML command) on a sensitive table, I want guardium to hold that command until I approve it on guardium (if I approve it the command will execute on DB otherwise the command will be rejected). I hope my message is clear now.
    Thanks in advance
    Thank you in advance,
    AMINE MIRAT.



    ------------------------------
    cherbani samir
    ------------------------------

    Original Message


  • 4.  RE: put requests on hold until we approve them in Guardium

    Posted Thu May 18, 2023 07:43 AM
    Reply

    Hi Cherbani,

    I am afraid this is not possible since Guardium is majorly a DAM solution to log Activity.

    Here I want to mention that you can use SGATE Attach, Detach and Terminate to stop any activities you like, all this is rules based and not on the fly/without human intervention.



    ------------------------------
    Regards,
    Rizwan Ali
    Senior Guardium Consultant
    Pakistan
    ------------------------------

    Original Message