System Requirements/ Platforms supported for IBM Guardium v10.5

Content

Links:

Guardium v10.1.x system requirements and supported platforms (prior to v10.5 ):  http://www-01.ibm.com/support/docview.wss?uid=swg27051083

Guardium v10.6 system requirements and supported platforms:  http://www.ibm.com/support/docview.wss?uid=ibm10719695


GUARDIUM v10.5

The Guardium products related to the specifications are: Database Activity Monitor; Advanced Compliance Workflow Automation; Enterprise Integrator; Vulnerability Assessment (VA), Entitlement Reports, Data-Level Access Control; and, Central Manager and Aggregator.

Cross-Platform Security

Guardium’s cross-platform Database Activity Monitoring (DAM) solution is ideal for heterogeneous environments because it supports all major DBMS data sources and protocols running on all major operating systems.

Disclaimer:
Not all functionality is available in all configurations. For more information, contact an IBM Security Sales Representative at: https://www.ibm.com/connect/ibm/us/en/?lnk=fcw

This table shows all data sources and versions currently supported in v10.5.

Host-Based Monitoring

Unique in the industry, S-TAPs are lightweight software probes that monitor both network and local database protocols (shared memory, named pipes, etc.) at the OS level of the database server. S-TAPs minimize any effect on server performance by relaying all traffic to separate Guardium appliances for real-time analysis and reporting, rather than relying on the database itself to process and store log data. S-TAPs are often preferred because they eliminate the need for dedicated hardware appliances in remote locations or available SPAN ports in your data center.

This table shows all OS platforms and versions for which S-TAPs are currently available.

* Supports network activity monitoring, local activity via Enterprise Integrator

What data source is supported by what Guardium product?

Legend for Column 4 - Guardium Products

Supported Data source platforms for IBM Guardium Vulnerability Assessment (VA)

Appliance deployment on cloud

Client-side requirements for UNIX S-TAP and Windows S-TAP

UNIX/Linux S-TAP: https://www.ibm.com/support/knowledgecenter/SSMPHH_10.5.0/com.ibm.guardium.doc.stap/stap/choose_setup.html

Windows S-TAP: https://www.ibm.com/support/knowledgecenter/SSMPHH_10.5.0/com.ibm.guardium.doc.stap/stap/windows_choose_setup.html

What Guardium features work with nonSQL databases?

End of Service

Guardium supports database and operating system versions up to their End-of-Service (EOS), Premier, or Mainstream support end dates. For IBM, they are published in http://www-01.ibm.com/software/support/lifecycle/ . For other vendors, contact your vendor representative to confirm their support end dates. IBM offers optional extended service support after EOS. Contact your IBM representative for further information. Guardium will support the hardware system it is running on up to the End-of Marketing (EOM) date plus 5 years or end of support date, whichever is sooner.


Supported web browsers

Internet Explorer 9 (IE9) and above on Windows 7. And turn off Compatibility View setting of Internet Explorer.

Firefox ESR 24 and above

Chrome 28 and above

Minimum screen resolution - 1366 x 768

Flexible Deployment

Guardium is available as a hardware or software offering, ensuring the solution can be easily deployed in a wide variety of environments. As a hardware offering, the solution is delivered with licensed software fully loaded and tested on a physical appliance provided by IBM (hardware appliance), When delivered as a software offering, the solution is delivered as software images ready to be deployed by the user on their own hardware (software appliance), either directly or as virtual appliances. While the software images can be installed on any VMware product, the VMware ESX server is the recommended platform for a virtual solution. Only VMware and Hyper-V are supported by Guardium.

The following table summarizes major hardware requirements for software appliances. The Guardium solution is designed to work on i86 Intel-based or AMD-based platforms (for example, x86_64). Only platforms and hardware that are officially supported by RedHat Linux 6.9 (64-bit) can be used as Guardium v10.1.32 platforms (note in Guardium v10.0 hardware supported by Redhat 6.5 is required), however, not all officially supported RedHat Linux platforms can be used. Platforms that require additional drivers or specialized post-install configuration are not supported at this time.

Minimum and Recommended Resources per software/virtual appliance

* Refer to IBM configuration tables for physical ranges.


Application Monitoring

Guardium identifies potential fraud by tracking activities of end-users who access critical tables via multi-tier enterprise applications rather than direct access to the database. This is especially important for applications that use connection pooling where all user traffic is aggregated within a few database connections, thereby masking the identity of end-users.

Guardium offers out-of-the-box support for the major off-the-shelf enterprise applications (see table below), and provides built-in tools to configure and add end-user identification for niche application and home-grown applications. Note: for most applications, some basic configuration is needed, to tailor the solution to your environment.