1、Federated Environment Build Process,Agenda,We will show the Federated Environment Build Process while implementing the Central Manager for 1 Aggregator and 2 collector multi-tier System Architecture.,Feature analysis,Understanding the problem Guardium in an enterprise deployment will consist of mult

2、iple Guardium servers monitoring different environments (different geographic locations or business units, for example). It may be useful to collect all data in a central location to facilitate an enterprise view of database usage. You can accomplish this by exporting data from a number of servers t

3、o another server that has been configured (during the initial installation procedures) as an aggregation server. In such a deployment, you typically run all reports, assessments, audit processes, and so forth, on the aggregation server to achieve an enterprise view. Solution Guardium supports hierar

4、chical aggregation, where multiple aggregation units merge upwards to a higher-level, central aggregation server within an enterprise environment. Benefit of feature Aggregation allows you to collect and merge information from multiple Guardium Servers to a single Guardium Aggregation Server,Guardiu

5、m Basic Environment,SQL Server,Non-invasive architecture Outside database Minimal performance impact (2-3%) No DBMS or application changes Cross-DBMS solution 100% visibility including local DBA access,Enforces separation of duties Does not rely on DBMS-resident logs that can easily be erased by att

6、ackers, rogue insiders Granular, real-time policies & auditing Who, what, when, how Automated compliance reporting, sign-offs & escalations (SOX, PCI, NIST, etc.),DB2,Guardium Federated Environment,Integration with LDAP, IAM, IBM Tivoli SIEM, IBM TSM, Remedy, ,Build Steps,Technical Sales Engineers m

7、ay at some point need to: provide a demonstration of the Federated Environment, Present how the systems are built and how they communicate. configure (on customer site) the appliances once shipped. Quick Reference Build Steps Step 1. Insert Guardium install CD and build the collectors just as you wo

8、uld build the standalone Step 2. Insert Guardium install CD and build the aggregator the same as the collectors with one exception. When asked to keep the default or choose NO to make this system an aggregator, choose NO. This will apply all of the necessary options for the aggregator. Step 3. When

9、the aggregator finishes run “store unit type manager”, this puts the aggregator into Central Manager mode “store unit type stap” this will allow S-TAP if so desired. The systems are now built, follow the below to configure them to communicate together.,Quick reference,Step 1 Make the shared secret t

10、he same on both Step 2 Configure the Central Manager Step 3 Register the Collectors Step 4 Portal User Configuration Step 5 Data Export (Collectors) Step 6 Data Import (Aggregator) Results,Step 1 Shared Secret,Once you have a Central Manager, you must connect the other machines into a Central Manage

11、ment system. For security reasons, it is a requirement that the communication between the machines be encrypted using the same shared secret. To accomplish this: For each machine (including the Central Manager), log into the Guardium GUI as the admin user Click on the Administrator Console tab Click

12、 on the System link in the left hand column menu Set the Shared Secret to the same string on all systems,Step 2 Configure the Central Manager,In a central management configuration, one Guardium aggregator is designated as the Central Manager. That unit can be used to monitor and control other Guardi

13、um units, which are referred to as managed units. Unmanaged units are referred to as standalone units. Central Management Host IP is the IP address of the Central Manager. port is the port number used by the Central Manager (usually 8443).,Step 3 Register the Collector,Registers the appliance for ma

14、nagement by the specific Central Management,Step 4 Portal User Configuration,Set the Portal User Synchronization & Scheduling,Step 4 Portal Scheduling,Set the scheduler by day/week and time,Step 5 Data Export (Collectors),Set the data export values,Step 6 Data Import (Aggregator),Set the data import values,Results!,CM M