Imperva Cyber Community

communities_1.jpg
 View Only
  • 1.  How to Identify Encryption is enabled or disabled on databases

    Posted 02-02-2023 16:16
    How to Identify or configure policy if  Encryption is enabled or disabled on databases?
    #DatabaseActivityMonitoring

    ------------------------------
    Vishal Navale
    Security Engineer
    Ally Financial Inc
    Detroit MI
    ------------------------------


  • 2.  RE: How to Identify Encryption is enabled or disabled on databases

    Posted 02-07-2023 04:45
    Hello Vishal,
    You can easily find it using the Alerts Dashboard and filter the ip address of your server involved as a start.

    From there, click on the details of that report. It will give you the information of the protocols, ciphers etc used.

    hope this helps.
    A

    ------------------------------
    [Leangf]
    ------------------------------



  • 3.  RE: How to Identify Encryption is enabled or disabled on databases

    Posted 02-08-2023 11:04
    Thanks Angfe for the information. 

    Is that cover all databases ? I want to run report which contains which databases are encrypted is enabled and disabled?

    Thanks
    Vishal

    ------------------------------
    Vishal Navale
    Security Engineer
    Ally Financial Inc
    Detroit MI
    ------------------------------



  • 4.  RE: How to Identify Encryption is enabled or disabled on databases

    Posted 02-09-2023 09:50

    Chances are there is two types of encryption:

    Encryption at rest: Data when it sits in the database

    Encryption in transist: data when it moves between the server and client.

    As @Angfe Landagan mentioned, the Imperva DAM or Sonar can get you if encryption is in use from the alerts from data in transists,

    For data at rest: you will have to check dabatase server config ex: Postgres, MariaDB etc. Sometimes enterprises will skip database encryption at rest cause they are already encrypting the disk that the database sits on.



    ------------------------------
    Sarvesh Lad
    Tech Lead @ On-Prem Managed Services (WAF, DAM, DRA & Sonar)
    ------------------------------



  • 5.  RE: How to Identify Encryption is enabled or disabled on databases

    Posted 02-09-2023 12:44

    Thanks

    I am looking for can we use query to discover encryption disables and generates alert.

    Thanks

    Vishal



    ------------------------------
    Vishal Navale
    Security Engineer
    Ally Financial Inc
    Detroit MI
    ------------------------------