Imperva Cyber Community

communities_1.jpg
 View Only

  • 1.  Connected Users in Audit Report

    Posted 07-10-2022 05:46
    Is there any way to fix the connected user with out changing the default time out value ?  As per Imperva documentation it happens only when the agent can't get syn ack traffic . but i have already restarted data base multiple times so that agent has more visibility on the traffic still no luck .

    If any one has gone through the similar problem then please share the solution ,

    Biswadeep
    Cybersecurity Engineer
    #DatabaseActivityMonitoring

    ------------------------------
    Mayukh Bhattacharya
    Information Security
    Kolkata
    ------------------------------


  • 2.  RE: Connected Users in Audit Report

    Posted 08-02-2022 05:12
    Hi Mayukh,

    Thanks for posting. Did you find a solution to this issue?

    Thanks,

    ------------------------------
    Sarah Lamont
    Digital Community Manager
    ------------------------------

    Original Message


  • 3.  RE: Connected Users in Audit Report

    Posted 08-02-2022 12:35
    Edited by Mayukh Bhattacharya 08-02-2022 12:36
    Hi Sarah

    In my case that was due to over loading of agent .We successfully able to avoid the connected user by using the agent monitoring rule . How ever the sessions which are created before invocation of the agent monitoring rule will still appear as connected user and it will take some times to get the clear visibility of the traffic . Also it is worth to the mention the TPS should be limited to as per your GW capacity accordingly one has to plan for optimum performance. 

    ------------------------------
    Biswadeep Pradhan
    Cybersecurity Engineer 
    UCO BANK
    ------------------------------

    Original Message