IBM Security Guardium

 View Only
  • 1.  New to Guardium

    Posted Tue April 19, 2022 11:36 AM
    Hi,

    I am new to Guardium. I want to improve knowledge in guardium. could you please assist me on this.
    • Guardium architecture
    • Guardium hradware requirements
    • Guardium supported platforms
    • Installation in GIM and S-Tap for different operating system.

    Thanks
    Sathyanarayanan.J

    ------------------------------
    sathya Janakiraman
    ------------------------------


  • 2.  RE: New to Guardium

    Posted Tue April 19, 2022 12:06 PM
    Hi Sathya:

    When I start in Guardium I had the same questions.
    • Guardium architecture
    Normally, Guardium consists in three elements: Collectors, aggregators and Central Manager (CM). An aggregator can be double role (CM and Agg.). My installations have one Agg/CM and a few collectors (6 collectors in some places). But in a large installations you can create CM + Agg + Coll.

    • Guardium hradware requirements
    In my installs I have only Virtual Machines, the requirements are 1TB on HD, 8 CPU, 32GB RAM, for Aggregators add 1TB to HD (2TB of HD). For QA you can use less memory (24GB and 512GB of HD), but for customer we recommend more space. Think similar if you need use some appliance (HW).

    • Guardium supported platforms
    See this link: https://www.ibm.com/support/pages/ibm-guardium-system-requirements-and-supported-platforms

    • Installation in GIM and S-Tap for different operating system.
    You can install STAP without use GIM, but I recommend install GIM in DB Servers because the updates are easy with it. GIM must be install the DB Server with a root account (Administrator in Windows environment).
    For Linux, AIX or similar, use: ./<GIM module>.sh -- --dir /usr/local/guardium --sqlguardip <ip_of_aggregator> --tapip <Ip_db_server> --perl /usr/perl  this installs GIM automatically. The STAp install you can do by aggregator using the gui interface.
    All modules for installations are in https://www.ibm.com/support/fixcentral

    Regards,
    Carlos Espinoza

    ------------------------------
    Carlos Espinoza Chandia
    ------------------------------