Imperva Cyber Community

communities_1.jpg
 View Only
  • 1.  ⭐Imperva Insights: How to configure DAM not to learn, nor to alert for DB profiles

    Posted 01-27-2020 14:19
    Let's start off this week by sharing a Database Activity Monitoring #ImpervaInsights! What frequently asked question has our Support team received recently?

    How do you configure On-Prem DAM not to learn, nor to alert for DB profiles? 

    What do our product experts have to say? 

    In some situations, if you see a lot of alerts and profile learning events against a table that does not need to be audited, you can follow these steps to stop learning and generating DB profile violation alerts: 

    To stop learning, go to Profile > Action > New user status and select "no new users are allowed."

    To stop alerting DB profile violations, go to Policy > SQL Profile Policy > Apply to, and un-apply profile violations from this server group. 

    If you've missed our previous Imperva Insights and want to explore all of the product expert advice we've been sharing, check it out 
    here
    #DatabaseActivityMonitoring

    ------------------------------
    Christopher Detzel
    Community Manager
    Imperva
    ------------------------------


  • 2.  RE: ⭐Imperva Insights: How to configure DAM not to learn, nor to alert for DB profiles

    Posted 09-01-2020 09:12
    Dear Chris,

    Good Day!

    Can you mention how to configure DAM to learn the DB profiling? 

    Currently, DAM is not learning the DB profiling for production DB;s rather it is learning for the non-production DB;s which is its default nature?

    Are there any permissions required to be enabled?

    Awaiting response.

    Regards,
    Ahad Rehan

    ------------------------------
    Ahad Rehan
    Gulf IT Network Distribution
    Dubai
    ------------------------------



  • 3.  RE: ⭐Imperva Insights: How to configure DAM not to learn, nor to alert for DB profiles

    Posted 09-01-2020 12:01
    Ahad

    The profile policy (in security policies) has a setting on the advanced tab which allows you to disable the learning engine for every application object in the Site Tree which is assigned to that policy. It sounds like you may have multiple profile policies with different settings for the Learning Engine assigned to different applications.

    ------------------------------
    Jeffrey Day
    ------------------------------