Imperva Cyber Community

Expand all | Collapse all

Scuba command line interface or scheduling a job

  • 1.  Scuba command line interface or scheduling a job

    Posted 07-28-2020 07:17

     Can Scuba  be used to make scheduled scans and automatically export the results?


    #DatabaseActivityMonitoring

    ------------------------------
    Sujata
    ------------------------------


  • 2.  RE: Scuba command line interface or scheduling a job

    Imperva Employee
    Posted 07-28-2020 07:25
    Hi Sujata,

    It's a tool that is used on demand to find the risks and misconfiguration of your databases.
    It cannot be scheduled as far as I know.

    ------------------------------
    Ira Miga
    Imperva
    Knowledge Engineer
    ------------------------------



  • 3.  RE: Scuba command line interface or scheduling a job

    Imperva Employee
    Posted 07-29-2020 13:32
    Hi Sujata,

    The Scuba tool is based on our Database Assessment Scan feature, with is part of our Data Security offering (sometimes called DAM).  Scuba can only look at one server at a time and has to be run manually.  It is great if you want to evaluate the capability or if you are a small customer that only needs to scan a few databases.  (or, if you just found out today that you need to have a scan report for an auditor tomorrow!)  

    If you are already a Data Security customer, you should have access to the Database Assessment Scans (DAS) and you should use those instead of Scuba.  The Database Assessment Scans will give you the ability to run schedules scans, maintain a scan history, and report across various servers, as well as exporting those results.

    FYI (for you or anyone searching for this) DAS is also available as a separate product if you are really just interested in that, and we can also work with consultants that want to provide scan services to their customers.

    Jim

    ------------------------------
    Jim Burtoft
    Imperva
    PA
    ------------------------------



  • 4.  RE: Scuba command line interface or scheduling a job

    Posted 07-30-2020 01:04
    Thank you Jim for reply.

    Regarding DAS tool usage : could you please provide features capabilities and can be integrated with the Integration server. Is It Open source or commercial.

     

    If commercial Please provide cost detail? Does DAS support different types of Databases like SQL, Oracle,DB2 etc.What policies scenarios it covers? 

    For trial how I can access it and explore for my usage please confirm



    ------------------------------
    Sujata
    ------------------------------



  • 5.  RE: Scuba command line interface or scheduling a job

    Imperva Employee
    Posted 07-31-2020 09:51
    The DAS scans are integrated as part of the Imperva Data Security offering (although they can be licensed as standalone).  In either case, you can do all the things we discussed above (run multiple scans against multiple servers at multiple times and report on all of them).  It is commercial (Scuba is the free version).

    You can find our documentation for it at https://docs.imperva.com/bundle/v13.6-database-activity-monitoring-user-guide/page/Scanning_and_Assessing_Databases.htm

    It does support various databases and the assessment correspond to various regulatory benchmarks like DISA (STIG) and CIS.  See https://docs.imperva.com/bundle/v13.6-database-activity-monitoring-user-guide/page/1078.htm for a list of supported databases and more information on the scan types.

    As for a trial version, just check out the Scuba tool you already have.  As for cost details, please PM me with your company and contact details and we can have someone reach out to you with pricing and a demo.

    Jim

    ------------------------------
    Jim Burtoft
    Imperva
    PA
    ------------------------------