The DAS scans are integrated as part of the Imperva Data Security offering (although they can be licensed as standalone). In either case, you can do all the things we discussed above (run multiple scans against multiple servers at multiple times and report on all of them). It is commercial (Scuba is the free version).
You can find our documentation for it at
https://docs.imperva.com/bundle/v13.6-database-activity-monitoring-user-guide/page/Scanning_and_Assessing_Databases.htmIt does support various databases and the assessment correspond to various regulatory benchmarks like DISA (STIG) and CIS. See
https://docs.imperva.com/bundle/v13.6-database-activity-monitoring-user-guide/page/1078.htm for a list of supported databases and more information on the scan types.
As for a trial version, just check out the Scuba tool you already have. As for cost details, please PM me with your company and contact details and we can have someone reach out to you with pricing and a demo.
Jim
------------------------------
Jim Burtoft
Imperva
PA
------------------------------
Original Message:
Sent: 07-30-2020 01:04
From: Sujata Ghadage
Subject: Scuba command line interface or scheduling a job
Thank you Jim for reply.
Regarding DAS tool usage : could you please provide features capabilities and can be integrated with the Integration server. Is It Open source or commercial.
If commercial Please provide cost detail? Does DAS support different types of Databases like SQL, Oracle,DB2 etc.What policies scenarios it covers?
For trial how I can access it and explore for my usage please confirm
------------------------------
Sujata
Original Message:
Sent: 07-29-2020 13:32
From: Jim Burtoft
Subject: Scuba command line interface or scheduling a job
Hi Sujata,
The Scuba tool is based on our Database Assessment Scan feature, with is part of our Data Security offering (sometimes called DAM). Scuba can only look at one server at a time and has to be run manually. It is great if you want to evaluate the capability or if you are a small customer that only needs to scan a few databases. (or, if you just found out today that you need to have a scan report for an auditor tomorrow!)
If you are already a Data Security customer, you should have access to the Database Assessment Scans (DAS) and you should use those instead of Scuba. The Database Assessment Scans will give you the ability to run schedules scans, maintain a scan history, and report across various servers, as well as exporting those results.
FYI (for you or anyone searching for this) DAS is also available as a separate product if you are really just interested in that, and we can also work with consultants that want to provide scan services to their customers.
Jim
------------------------------
Jim Burtoft
Imperva
PA
Original Message:
Sent: 07-28-2020 00:22
From: Sujata Ghadage
Subject: Scuba command line interface or scheduling a job
Can Scuba be used to make scheduled scans and automatically export the results?
#DatabaseActivityMonitoring
------------------------------
Sujata
------------------------------