Imperva Cyber Community

communities_1.jpg
 View Only
  • 1.  Imperva Agent does not work Post OEL Patching

    Posted 24 days ago

    Hi community members,

    Greetings for the day,
     
    We have a critical DB server running on Oracle type DB. The details are as follow
    OS :- Oracle Linux Server 8.10
    Kernel :- 5.15.0-300.163.18.7.el8uek.x86_64
     
    The agent was running on Imperva-ragent-OEL-v8-kUEK-px86_64-b14.8.0.70.0.653393
     
    Post OS patching, The agent got disconnected and when we tried to start the agent, we got the following error.
     
    Jun 17 12:29:08 dcexaprdcbs01 rainit[31755]: Test  5: Is UEK. Failed: This package is for Oracle Unbreakable Enterprise Kernel and the current kernel is not Oracle Unbreakable Enterprise Kernel.
     
    Later we ran the which agent script :- which_ragent_package_0322.sh
    and tried to install the agent :- 
    Imperva-ragent-OEL-v8-kUEK-px86_64-b14.9.0.80.0.656983.tar.gz
     
    Got the following error
    Test  7: Is UEK. Failed: This package is for Oracle Unbreakable Enterprise Kernel and the current kernel is not Oracle Unbreakable Enterprise Kernel.

    I have tried number of data-coverage tool recommended agents getting the same error,
    I have raised a case with Imperva, but was wondering if anyone has faced this issue and what was done?

    #DatabaseActivityMonitoring

    ------------------------------
    Bharath Patil
    Manager
    Karnataka Bank Ltd.
    Bengaluru
    ------------------------------


  • 2.  RE: Imperva Agent does not work Post OEL Patching

    Posted 24 days ago
    Edited by SBISOC 4430 24 days ago

    Hi Bharath,

    We are also facing same type of issue when we installed that agent on OEL 8 UEK Release 7. As per Imperva's documentation (https://docs-cybersec.thalesgroup.com/bundle/v14.9-agent-release-notes/page/92488.htm), that agent is applicable to OEL 8 UEK 64-bit (5.4.17-2011.2.2 to the latest version of 5.4.17 UEK kernel series supported by Oracle. Even Kabi file does not show any entry for 5.15.0 kernel.

    Although the KB article (https://docs-cybersec.thalesgroup.com/bundle/z-kb-articles-knowledgebase-support/page/660865350.html) is related to Exadata running on OEL servers, we have not tested the fresh installation with workaround (of ignoring Test 7) provided for OEL 8 UEK agent v14.9P80.

    However, one new version (https://docs-cybersec.thalesgroup.com/bundle/v14.9-agent-release-notes/page/92980.htm) has been released which might have coverage for that OS version. 

    Also, there are some limitations in case of the agents monitoring databases on OEL.

    Regards,



    ------------------------------
    SBISOC 4430
    Manager
    Mumbai
    ------------------------------



  • 3.  RE: Imperva Agent does not work Post OEL Patching

    Posted 23 days ago

    Thanks the workaround worked, but Imperva has released a new patch 14.9.0.100.0, this works



    ------------------------------
    Bharath Patil
    Manager
    Karnataka Bank Ltd.
    Bengaluru
    ------------------------------