Imperva Cyber Community

Expand all | Collapse all

Switching from closed to open for all profiled users at once

  • 1.  Switching from closed to open for all profiled users at once

    Posted 06-15-2020 09:56
      |   view attached
    Is there a way to set the Handling unprofiled queries that do not match any query group to be in open mode for all users for a period of time before switching to closed? 

    Or better yet how can i switch all users to open mode from closed mode?

    #DatabaseActivityMonitoring

    ------------------------------
    samson adewale
    GA
    ------------------------------


  • 2.  RE: Switching from closed to open for all profiled users at once

    Community Manager
    Posted 06-16-2020 11:43
    @samson adewale I haven't forgot about you. I'm trying to find a good answer for you and in the meantime, I am hoping the community can help out.  ​

    ------------------------------
    Christopher Detzel
    Community Manager
    Imperva
    ------------------------------



  • 3.  RE: Switching from closed to open for all profiled users at once

    Imperva Employee
    Posted 06-16-2020 12:30
    Hi Samson,
    To your first question. The DB profile policy specifies the time to add new users to the profile. New users will alert until they are added to the profile. Under the advanced tab, there are settings to change the time.
    Advanced Tab
    To the second question. Under Profile > application view > <the application>. The users are listed. In the pic there is a green lock. In the upper right there is an action. Click here and select new users are allowed.

    Thank you,
    Scott




    ------------------------------
    Scott Morgan
    Impreva
    ------------------------------



  • 4.  RE: Switching from closed to open for all profiled users at once

    Posted 06-16-2020 12:43
    Thanks for the response. 

    My question is really on the query group / table and operations list as seen in my previous screenshot. It seems some users are being switched to closed mode earlier than what i wanted. 

    My question is if there is any way to make all users go back to open mode without deleting each users profile or recreating the application. Its not necessarily related to the lock on the user list or the automated update you mentioned in your first statement.


    ------------------------------
    samson adewale
    GA
    ------------------------------



  • 5.  RE: Switching from closed to open for all profiled users at once

    Imperva Employee
    Posted 06-17-2020 16:36
    Hi Samson,
    Thank you for the clarification.
    In the DB policy and advanced tab, here criteria can be set to engage the protect mode. The previous screenshot showed the user. Each Unauthorized *** has fields that set the transition. The setting will engage the policy under the policy rule tab.
    Each Unauthorized * has setting to transition from open to protect mode
    DB Profiles:
    https://docs.imperva.com/bundle/v14.1-database-activity-monitoring-user-guide/page/1686.htm

    To switch learning mode, under the profile > app > learning tab, there is a line Learn Individual queries for regular DML query groups.  Click apply button next Switch all query groups to (to the option you want)

    More insight:
    Learn Individual Queries:
    https://docs.imperva.com/bundle/v14.1-database-activity-monitoring-user-guide/page/1724.htm
    Query Protect Modes:
    https://docs.imperva.com/bundle/v14.1-database-activity-monitoring-user-guide/page/1700.htm

    Thank you,
    Scott



    ------------------------------
    Scott Morgan
    Impreva
    ------------------------------



  • 6.  RE: Switching from closed to open for all profiled users at once

    Imperva Employee
    Posted 06-16-2020 12:43
    Some documentation.

    DB APU Profiling Dynamics:
    https://docs.imperva.com/bundle/v14.1-database-activity-monitoring-user-guide/page/1743.htm
    DB Profiles:
    https://docs.imperva.com/bundle/v14.1-database-activity-monitoring-user-guide/page/1686.htm
    Protect Mode Thresholds:
    https://docs.imperva.com/bundle/v14.1-administration-guide/page/6773.htm

    ------------------------------
    Scott Morgan
    Impreva
    ------------------------------