SecureSphere Remote Agent

SecureSphere Remote Agent Overview

the securesphere remote agent installed on the database server, provides visibility into database activity by monitoring all database communications and forwarding these communications, via TCP or UDP Tunnel, to a listener application configured on the securesphere gateway.

this Article covers the following:

1. Database Activity Monitoring
2. OS User chaining
3. Remote Agent Configuration

Database Activity Monitoring

Because the Agent is installed inside the database server, the remote agent is capable of monitoring all database activity:

• Local Database Activity, such as operations performed by DBAs, which is conducted by either TCP or another IPC mechanism
• Network Database Activity, Which maybe visible to SecureShpere gateway, depending on the deployment

the remote agent intercepts this traffic using a variety of ways, including by a loadable kernel component.

Obtaining the latest Version of Imperva SecureSphere Database Agent

Obtaining the Latest Version of the DB Agent

The latest version of the SecureSphere DB Agent and the accompanying Release Notes are available on the Imperva FTP site at:
ftp-us.imperva.com/Downloads/Software/SecureSphere/DB Agents/v6/[Supported OS]

This location contains a separate sub-directory for each supported OS. After downloading the DB Agent but before installing the DB Agent, carefully read the DB Agent Release Notes.

How To: Configure SecureSphere Windows Database Agent

The SecureSphere Database Agent, installed on the database server, provides visibility into database activityby monitoring all database communications and forwarding these communications, via a TCP or UDP tunnel, to a listener application configured on a SecureSphere gateway.

SecureSphere Database Monitoring Architecture

this article covers the installation, configuration and ongoing maintenance of the Imperva SecureSphere Database Agent.