Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.
The June Virtual User Group meeting included a customer presentation titled "ML performance analysis of Guardium Universal Connector." Thanks to all who participated! The meeting slide deck is attached here. It doesn't include the customer presentation; to request it, contact me or the presenter.
Discussion Summary
Customer presentation
Vui Huang Tea from Swedbank gave a brief presentation on the impact of adjusting different settings in the Oracle universal connector (UC). Since documentation doesn't have this info, he did the analysis himself. Statistics were collected from the Guardium buffer usage monitor. He used correlation charts to show the impact of increasing and decreasing values for three UC arguments (uc_period, uc_rows and uc_timeout) on resource usage statistics. He uses the results as a guide to fine tune the UC.
For more information on the OUA UC, see:
https://github.com/IBM/universal-connectors/blob/main/filter-plugin/logstash-filter-oua-guardium/README.md
Support
A reminder about GIM certificate expiration, see the Tech Doc (updated recently): https://www.ibm.com/support/pages/node/7115129
A VUG member offered a tip: remember to turn on auto distribute certificates with environment supplying GIM patching for new certificate. They forgot to do this, but still got it to work.
Other discussion
A VUG member shared that they have introduced a 'RemediationDue' date to their scan reports, which will allow their stakeholders to know when something is due to be fixed based on the severity of the finding and the criticality of the datasource. Another thing they set up is full tracking of data source connectivity. They have a process to run connectivity test every more and track it across scans, so they know why something is not connecting.
A VUG member asked what happens with ideas (RFEs). She doesn't see a lot of updates so doesn't know if they're being considered or in the pipeline. Nagendra Pattavardhanam, IBM Guardium Product Manager, described the process: we review all the ideas, do a high level feasibility, put into product area categories, then depending on priorities and demand, determine if they will go into the product. This process takes a couple of months.