Marvin,
The agents are installed with a local admin credential. When it creates the services SecureSphere Agent service, it is set to run with NT Authority, so all the agent activity is run with NT Authority permissions, including the data interface discovery. This is normal.
------------------------------
Paul Hammons
Imperva Senior Sales Engineer
Cape Coral, Florida
------------------------------
Original Message:
Sent: 01-19-2021 20:30
From: Marvin Tablizo
Subject: Agent's Discovery of Data Interfaces Scan
Hi Community,
We found out that Agent's Discovery of Data Interfaces uses NT AUTHORITY. Is it normal?
#DatabaseActivityMonitoring
------------------------------
Marvin Tablizo
M-Security Tech Philippines Inc
Makati
------------------------------