Imperva Cyber Community

Is there a way to set the Handling unprofiled queries that do not match any query group to be in open mode for all users for a period of time before switching to closed? 

Or better yet how can i switch all users to open mode from closed mode?
#DatabaseActivityMonitoring

------------------------------
samson adewale
GA
------------------------------

@Samson Adewale I haven't forgot about you. I'm trying to find a good answer for you and in the meantime, I am hoping the community can help out.  ​

------------------------------
Christopher Detzel
Community Manager
Imperva
------------------------------

Original Message:
Sent: 06-15-2020 09:14
From: samson adewale
Subject: Switching from closed to open for all profiled users at once

Is there a way to set the Handling unprofiled queries that do not match any query group to be in open mode for all users for a period of time before switching to closed? 

Or better yet how can i switch all users to open mode from closed mode?
#DatabaseActivityMonitoring

------------------------------
samson adewale
GA
------------------------------

Hi Samson,
To your first question. The DB profile policy specifies the time to add new users to the profile. New users will alert until they are added to the profile. Under the advanced tab, there are settings to change the time.


------------------------------
Scott Morgan
Impreva
------------------------------

Original Message:
Sent: 06-15-2020 09:14
From: samson adewale
Subject: Switching from closed to open for all profiled users at once

Is there a way to set the Handling unprofiled queries that do not match any query group to be in open mode for all users for a period of time before switching to closed? 

Or better yet how can i switch all users to open mode from closed mode?
#DatabaseActivityMonitoring

------------------------------
samson adewale
GA
------------------------------

Thanks for the response. 

My question is really on the query group / table and operations list as seen in my previous screenshot. It seems some users are being switched to closed mode earlier than what i wanted. 

My question is if there is any way to make all users go back to open mode without deleting each users profile or recreating the application. Its not necessarily related to the lock on the user list or the automated update you mentioned in your first statement.


------------------------------
samson adewale
GA
------------------------------

Original Message:
Sent: 06-16-2020 12:30
From: Scott Morgan
Subject: Switching from closed to open for all profiled users at once

Hi Samson,
To your first question. The DB profile policy specifies the time to add new users to the profile. New users will alert until they are added to the profile. Under the advanced tab, there are settings to change the time.

To the second question. Under Profile > application view > <the application>. The users are listed. In the pic there is a green lock. In the upper right there is an action. Click here and select new users are allowed.

Thank you,
Scott

------------------------------
Scott Morgan
Impreva

Original Message:
Sent: 06-15-2020 09:14
From: samson adewale
Subject: Switching from closed to open for all profiled users at once

Is there a way to set the Handling unprofiled queries that do not match any query group to be in open mode for all users for a period of time before switching to closed? 

Or better yet how can i switch all users to open mode from closed mode?
#DatabaseActivityMonitoring

------------------------------
samson adewale
GA
------------------------------

Hi Samson,
Thank you for the clarification.
In the DB policy and advanced tab, here criteria can be set to engage the protect mode. The previous screenshot showed the user. Each Unauthorized *** has fields that set the transition. The setting will engage the policy under the policy rule tab.

------------------------------
Scott Morgan
Impreva
------------------------------

Original Message:
Sent: 06-16-2020 12:42
From: samson adewale
Subject: Switching from closed to open for all profiled users at once

Thanks for the response. 

My question is really on the query group / table and operations list as seen in my previous screenshot. It seems some users are being switched to closed mode earlier than what i wanted. 

My question is if there is any way to make all users go back to open mode without deleting each users profile or recreating the application. Its not necessarily related to the lock on the user list or the automated update you mentioned in your first statement.


------------------------------
samson adewale
GA

Original Message:
Sent: 06-16-2020 12:30
From: Scott Morgan
Subject: Switching from closed to open for all profiled users at once

Hi Samson,
To your first question. The DB profile policy specifies the time to add new users to the profile. New users will alert until they are added to the profile. Under the advanced tab, there are settings to change the time.

To the second question. Under Profile > application view > <the application>. The users are listed. In the pic there is a green lock. In the upper right there is an action. Click here and select new users are allowed.

Thank you,
Scott

------------------------------
Scott Morgan
Impreva

Original Message:
Sent: 06-15-2020 09:14
From: samson adewale
Subject: Switching from closed to open for all profiled users at once

Is there a way to set the Handling unprofiled queries that do not match any query group to be in open mode for all users for a period of time before switching to closed? 

Or better yet how can i switch all users to open mode from closed mode?
#DatabaseActivityMonitoring

------------------------------
samson adewale
GA
------------------------------

Some documentation.

DB APU Profiling Dynamics:
https://docs.imperva.com/bundle/v14.1-database-activity-monitoring-user-guide/page/1743.htm
DB Profiles:
https://docs.imperva.com/bundle/v14.1-database-activity-monitoring-user-guide/page/1686.htm
Protect Mode Thresholds:
https://docs.imperva.com/bundle/v14.1-administration-guide/page/6773.htm

------------------------------
Scott Morgan
Impreva
------------------------------

Original Message:
Sent: 06-15-2020 09:14
From: samson adewale
Subject: Switching from closed to open for all profiled users at once

Is there a way to set the Handling unprofiled queries that do not match any query group to be in open mode for all users for a period of time before switching to closed? 

Or better yet how can i switch all users to open mode from closed mode?
#DatabaseActivityMonitoring

------------------------------
samson adewale
GA
------------------------------