Imperva Cyber Community

Hello Imperva Community Members,

Greetings for the day,

I have a requirement in Database Activity Monitoring (DAM)

An alert should be received and the user/query should be blocked for an UPDATE SQL query executed without where condition, 

Is there a way we can achieve that?

i Have tried the following

   Operations=> Update
   SQL Exception String=> Exclude All=>  Value Where
   SQL Exception => Generated/Not Generated (Tested for both)

I have tried few other combinations with Columns and custom command groups but not luck

Would appreciate if some one could provide guidance regarding the same

#DatabaseActivityMonitoring 

Hi Bharath,

Please follow the steps below and let me know it helps you.

Firstly, go to "Setup>Global Objects>Generic Dictionary Groups" path and add new dictionary from scratch with only giving name. After add an entry in it and type part="where" for Pattern value like below.

Then add new DB Service Custom security policy with the following parameters and apply to related service.

Hello Imperva Community Members,

Greetings for the day,

I have a requirement in Database Activity Monitoring (DAM)

An alert should be received and the user/query should be blocked for an UPDATE SQL query executed without where condition, 

Is there a way we can achieve that?

i Have tried the following

   Operations=> Update
   SQL Exception String=> Exclude All=>  Value Where
   SQL Exception => Generated/Not Generated (Tested for both)

I have tried few other combinations with Columns and custom command groups but not luck

Would appreciate if some one could provide guidance regarding the same

#DatabaseActivityMonitoring 

Hello Cezmi Cal,

I am Glad to report that the solution provided by you is working perfectly,

Thanks for your assistance Buddy, Cheers!!

Hi Bharath,

Please follow the steps below and let me know it helps you.

Firstly, go to "Setup>Global Objects>Generic Dictionary Groups" path and add new dictionary from scratch with only giving name. After add an entry in it and type part="where" for Pattern value like below.

Then add new DB Service Custom security policy with the following parameters and apply to related service.

Hello Imperva Community Members,

Greetings for the day,

I have a requirement in Database Activity Monitoring (DAM)

An alert should be received and the user/query should be blocked for an UPDATE SQL query executed without where condition, 

Is there a way we can achieve that?

i Have tried the following

   Operations=> Update
   SQL Exception String=> Exclude All=>  Value Where
   SQL Exception => Generated/Not Generated (Tested for both)

I have tried few other combinations with Columns and custom command groups but not luck

Would appreciate if some one could provide guidance regarding the same

#DatabaseActivityMonitoring