Profile

Alejandro Hernandez

Contact Details

My Content

1 to 20 of 20 total

RE: Monitor changes in both database and server level role

Posted By Alejandro Hernandez 03-08-2023 18:22
Found In Egroup: Imperva Cyber Community \ view thread
Hi Polycarpos You will create a command group in the Global objects , and find the alter role and alter server role, and this command group add to the custom security policy and test the rule ------------------------------ Alejandro Hernandez Consultant and Trainer Soluciones Integrales en Capacitacion ...

RE: response code

Posted By Alejandro Hernandez 01-12-2023 18:21
Found In Egroup: Imperva Cyber Community \ view thread
The response code "empty" means that the WAF is blocking the "client" connection to the Web application If your WAF is blocking the connection your web server doesn't receive the connection and has not responded to the WAF ------------------------------ Alejandro Hernandez Consultant and Trainer Soluciones ...

RE: Audit fast view time adjustment

Posted By Alejandro Hernandez 01-12-2023 18:16
Found In Egroup: Imperva Cyber Community \ view thread
Hi ZhiXiang This an individual configuration for each audit policy rule Regards ------------------------------ Alejandro Hernandez Consultant and Trainer Soluciones Integrales en Capacitacion SA de CV ("SICAP") Mexico D.F ------------------------------

RE: Questions

Posted By Alejandro Hernandez 01-03-2023 18:42
Found In Egroup: Imperva Cyber Community \ view thread
Hi Jose If you have the Threat Intelligence License ( ThreatRadar) and the bot protection module, you can do it ------------------------------ Alejandro Hernandez Consultant and Trainer Soluciones Integrales en Capacitacion SA de CV ("SICAP") Mexico D.F ------------------------------

RE: Questions abou IPs

Posted By Alejandro Hernandez 12-28-2022 20:56
Found In Egroup: Imperva Cyber Community \ view thread
You need to configure the forwarded connection and add the Proxy IP = incapsula (CloudWAF) I added the reference https://docs.imperva.com/bundle/v14.6-web-application-firewall-user-guide/page/2616.htm ------------------------------ Alejandro Hernandez Consultant and Trainer Soluciones Integrales en ...

RE: Vulnerability SSH Weak Key Exchange (MX & GW)

Posted By Alejandro Hernandez 11-30-2022 17:59
Found In Egroup: Imperva Cyber Community \ view thread
Hi Jagadesh You need to access via CLI and found the file in /etc/ssh/ use vi sshd_config And Add the following line; and then restart the ssh service service sshd restart ------------------------------ Alejandro Hernandez Consultant and Trainer Soluciones Integrales en Capacitacion SA de CV ("SICAP") ...

RE: DB Response data verification

Posted By Alejandro Hernandez 11-23-2022 17:13
Found In Egroup: Imperva Cyber Community \ view thread
Hi Kishore You will go to the audit DB data, select any event, and click on Retrieve Event Data Then, you will see all the information, and you need to find the response size column, and you will see a number, click on the number And now you will see the DB response ------------------------------ ...

RE: Agent version

Posted By Alejandro Hernandez 10-26-2022 11:21
Found In Egroup: Imperva Cyber Community \ view thread
Hi Danilo In general, you do not need to do anything after uninstalling the SecureSphere Agent https://docs.imperva.com/bundle/v14.7-dam-administration-guide/page/7353.htm ------------------------------ Alejandro Hernandez Consultant and Trainer Soluciones Integrales en Capacitacion SA de CV ("SICAP") ...

RE: Agent version

Posted By Alejandro Hernandez 10-25-2022 16:40
Found In Egroup: Imperva Cyber Community \ view thread
Hi Danilo, You will go via CLI and in the folder /opt/imperva/ragent/bin you will find a racli command, execute with ./racli and you will see the agent version ------------------------------ Alejandro Hernandez Consultant and Trainer Soluciones Integrales en Capacitacion SA de CV ("SICAP") Mexico ...

RE: Gateway is disconnected from MX

Posted By Alejandro Hernandez 09-08-2022 10:07
Found In Egroup: Imperva Cyber Community \ view thread
Hi Olgerta Normally this is a network problem You need to validate in the communication with the gateway and the MX is reachable You will test with tcpdump in both devices with ports 443 and 8083 Or if you have a firewall between the devices, validate this communication ------------------------------ ...

RE: Agent ASO misconfiguration Error

Posted By Alejandro Hernandez 09-08-2022 10:00
Found In Egroup: Imperva Cyber Community \ view thread
What is the exact error? Could be this document helps https://docs.imperva.com/bundle/v14.7-database-activity-monitoring-user-guide/page/63715.htm ------------------------------ Alejandro Hernandez Consultant and Trainer Soluciones Integrales en Capacitacion SA de CV ("SICAP") Mexico D.F ---------- ...

RE: Older version IMPERVA Agent

Posted By Alejandro Hernandez 09-08-2022 09:52
Found In Egroup: Imperva Cyber Community \ view thread
Hi carol For these servers and SQL versions I installed agent version 14.4.0.70, and it's working well MS SQL Server Standard 2016 MS Windows Server 2012 R2 Standard MS SQL Server 2014 MS Windows Server 2012 R2 DC ------------------------------ Alejandro Hernandez Consultant ...

RE: How to recover "SECURE" user password during importing?

Posted By Alejandro Hernandez 11-25-2020 08:50
Found In Egroup: Imperva Cyber Community \ view thread
Could be this link is useful https://www.imperva.com/sign_in.asp?retURL=/articles/Procedure/Password--Retrieving-secure-and-system-userpassword- from-the-MX ------------------------------ alejandro hernandez Mexico City ------------------------------

RE: Database Activity Monitoring (DAM) Ask Me Anything Session

Posted By Alejandro Hernandez 09-18-2020 11:14
Found In Egroup: Imperva Cyber Community \ view thread
Considerations to make a gateway cluster in VMware, how to do it, there is a document that explains the implementation more clearly, if you have a more explicit document or diagram, I would greatly appreciate it Another question, I want to make some security policy based on certain DML commands but they ...

Cluster Gateway Configuration

Posted By Alejandro Hernandez 09-18-2020 11:12
Found In Egroup: Imperva Cyber Community \ view thread

RE: Is there a limitation on blocking when my windows server + MSSQL has DH?

Posted By Alejandro Hernandez 09-03-2020 14:07
Found In Egroup: Imperva Cyber Community \ view thread
when you apply this configuration <external-traffic-monitoring-in-kern>1</external-traffic-monitoring-in-kern> <mssql-advanced-monitoring>1</mssql-advanced-monitoring> Have you restarted the agent after to put this command??? ------------------------------ alejandro hernandez ...

RE: Patch Installation requires more than 1 GB in MX

Posted By Alejandro Hernandez 04-14-2020 14:24
Found In Egroup: Imperva Cyber Community \ view thread
The solution was a Fresh install to MX in version 13.5.0.35 and import the backup Because during the upgrade, the file was corrupted ------------------------------ alejandro hernandez Mexico City ------------------------------

RE: Patch Installation requires more than 1 GB in MX

Posted By Alejandro Hernandez 04-08-2020 11:06
Found In Egroup: Imperva Cyber Community \ view thread
Hello Christopher Thanks for your comments, TAC support recommend me to delete the large size files in /opt/SecureSphere/server/SecureSphere/jakarta-tomcat-secsph/webapps/SecureSphere/WEB-INF/ reptemp/ and other files in /var yesterday I deleted a lot of backup, reports files I try to install ...

Patch Installation requires more than 1 GB in MX

Posted By Alejandro Hernandez 04-07-2020 09:58
Found In Egroup: Imperva Cyber Community \ view thread
I want to upgrade my MX from version 13.5.0.20 to 13.6.0.35 But when I try to execute the patch send this error: Patch Installation requires more than 1GB on /tmp, but the tmp folder has 300 GB available in /tmp #On-PremisesWAF(formerlySecuresphere) ------------------------------ alejandro hernandez ...

Replace old Gateway KRP in HA

Posted By Alejandro Hernandez 03-03-2020 03:42
Found In Egroup: Imperva Cyber Community \ view thread
could you help me, I need to replace an old gateways, what is the best practice for Replace HA Gateway in KRP???? Thanks #On-PremisesWAF(formerlySecuresphere) ------------------------------ alejandro hernandez Mexico City ------------------------------