Release Notes ================ InfoSphere Guardium. Release: 9.1. Version InfoSphere Guardium v9.0, patch 200. Fix Completion Date:

Transcription

1 Release Notes ================ Product: IBM InfoSphere Guardium Release: 9.1 Version InfoSphere Guardium v9.0, patch 200 Fix Completion Date: Description: InfoSphere Guardium v9.0, patch 200 Finding the Fix/Patch ============================= This document is intended to provide a reference to the contents of this fix/patch. If applicable, the detailed description of each fix and instructions for applying this fix/patch are contained within the download package. The actual package is available for downloading from the IBM Fix Central web site at Make the following selections on Fix Central: Product Group: Information Management Product: InfoSphere Guardium Installed Version: 9.0 Platform: Linux Click "Continue", then select "Browse for fixes" and click "Continue" again. ============================= 1

2 V9.1 patch 200 Release Notes See a summary of public URLs for the full number of Guardium v9.0 releases, located at the end of this document. Note: V9.1 patch is available as a patch, and also as a new 64-bit ISO. New Features and Enhancements Distributed Report Builder This Central Manager feature provides a way to automatically gather data from all or a subset of the Guardium managed units associated with this particular Central Manager. Distributed reports are designed to provide a high-level view, to correlate data from across data sources, and for summary views. You would continue to use aggregators for the row level data gathering across collectors. This capability alleviates an issue that can arise in complex enterprise environments when users don't always know the exact managed unit that has the data that is required to for a particular report. This can happen because the link between Guardium collectors and databases can change over time based on configuration options such as load balancing. This is further complicated by considerations such as the time period and data retention policy on the Aggregator and Collector. It is easy to create a Distributed Report. Simply define it via the Distributed Report screen, add to a Pane and it is ready for your use. REST JSON APIs JSON (Javascript Object Notation) output option has been added to support GuardAPI functions. This is part of REST APIs. REST stands for Representational State Transfer. It relies on a stateless, client-server, cacheable communications protocol, and in virtually all cases, the HTTP protocol is used. REST is an architecture style for designing networked applications. The idea is that, rather than using complex mechanisms such as CORBA, RPC or SOAP to connect between machines, simple HTTP is used to make calls between machines. RESTful applications use HTTP requests to post data (create and/or update), read data (for example, make queries), and delete data. Thus, REST uses HTTP for all four Create/Read/Update/Delete operations. REST is a lightweight alternative to mechanisms like RPC (Remote Procedure Calls) and Web Services (SOAP, WSDL, etc.). 2

3 Note: IBM Guardium will host a Tech Talk on REST API on April 29, Go to the Guardium Community wiki page for registration, as well as presentation materials after the Tech Talk: a2c8cb_4b9c_83e4_09b3c6f60e46/page/take%20a%20restful%20look%20at%20info Sphere%20Guardium%20APIs bit.ly/guardwiki Predefined Regular Expressions Patch 200 adds preconfigured pattern tests for two identifiers that are commonly used in Brazil: the Cadastro de Pessoas Físicas (CPF), a personal identifier, and the Cadastro Nacional de Pessoas Jurídicas (CNPJ), an identification number used for Brazilian companies. You can use these patterns in policies to identify sensitive data or to take action when they are found in database traffic. Guardium Timestamp Precision Guardium report for DB2 for i In v9.0 patch 200, the field of "ACK Response Time" in the "Full SQL" entity will now be used to store the milliseconds portion of the related timestamp. This change will facilitate the Guardium report showing the true/actual order of DB2 for i statement execution. Users will need to sort by that field on the Guardium report in order to organize sequencing of events. PureData offerings supported by InfoSphere Guardium Guardium DAM supported? VA supported? IBM PureApplication System No Yes IBM PureData System for Hadoop Yes No IBM PureData System for Operational Analysis (PDOA) Yes Yes IBM PureData System for Analytics Yes Yes IBM PureData System for Transactions (PDTX) yes yes Online help available via Web The online help is included in the Guardium 9.1 Information Center on the Web at Search all the product information together at that site. The information center is updated more frequently than the embedded online help and is the most up-to-date source of information. 3

4 Language Pack not needed Note: This release does not require a separate language pack. 4

5 Guardium Patch Update 9.0 p200 Dependencies: patch 150 Includes patches: 151, 152, 153, 154, 155, 156, 157, 158, 159, 161, 162, 163, 164, 165, 166, 167, 168, 169, 170, 181, 182, 183, 184, 185 Fix # Problem Description Custom alerting fix. Add to SQL file, two statements: insert into CUSTOM_SECURITY_PERMISSION (PERMISSION_CLASS, TARGET, ACTION) values ( "java.util.propertypermission", "oracle.net.tns_admin", "read"); insert into CUSTOM_SECURITY_PERMISSION (PERMISSION_CLASS, TARGET) values ( "java.lang.runtimepermission", "accessclassinpackage.sun.security.*"); Change reconnect time so STAP Data set is logged (z/os) Fix client host name handling in instance where Chinese characters in "Client Host Name" are missing when the client is connecting to Oracle. Correct report showing incorrect result for number of FULL SQL per Source program run in audit or ad-hoc process (64-bit) Correct outer join dominant table for all domains, not just for custom query Fix syslog alerts. Change code to support multiple remotelog settings Fix CAS client jar file Use this patch to install files required by Guardium functions Data Explorer and Change Data Capture (CDC) Fix FileAid for DB2 (z/os) Fix instance where S-TAP Event report is purged more often than customer specified, by removing tap event purge from software tap purge. Update/display_stap_config work for non primary in GuardAPI command, grdapi update_stap_config Description of the issue Records of Guardium STAP activity are stored on the collector on a continual basis in a live Guardium system. There are periodic processes being run by the GUI server on the Guardium collector that manage that data. Due to a bug, the Guardium server can experience an out of memory condition in those periodic processes, which typically run every five minutes. The out of memory condition will cause the Guardium GUI server to terminate 5

6 Fix # Problem Description unexpectedly. Even after restarting the GUI, the issue may reoccur repeatedly. Resolution For a temporary fix, you can apply the following work-around. Disable the update software tap change schedule using the cli client by using the following command: grdapi delete_schedule jobname=updatestapchangejob jobgroup=updatestapchangejobgroup However, it is highly recommended that you install the patch we are providing. Once the patch is installed and the GUI restarted the issue will disappear immediately Fix Distinct and sort by fields not working correctly in Audit process results Fix encrypted login byte order Fix instance where adding indexing to custom table functionality clashed with upgrade to MySQL5, Fix custom alert JAVA class XACML import/export fix Specify Guardium server http header on port Fix instance where some SQL statements on Sybase ASE 15.7 are not captured by Guardium. Do weak check for data length. Correct instance where getting insert error when running Universal feed type 3 sample program , Sniffer fix - correct response time, add text explanation of error GUI change - For audit task report with dynamic group as run time parameter, display group name / description, rather than group ID , 38154, , 35102, 37438, Additions and enhancements to REST API. Create session start message for each BigInsights analyzer. 6

7 End of Service IBM InfoSphere Guardium v8.0.0 and v8.0.1 will enter end of service (EOS) on September 30, Customers interested in continued support for these versions after the EOS date can purchase a service extension (SE) for up to two (2) years. The fee-based service extension provides technical support such as defect corrections, restrictions, and bypasses for new problems discovered after the product has been withdrawn from support. Fixes are provided at the "then current" corrective service level (Fix Pack, PTF, CSD, etc.). Conditions apply. Customers with current Subscription & Support contracts are eligible for an upgrade prior to the EOS date. Customers interested in obtaining a service extension quote should contact their local sales person/team. Requesting a quote early can avoid unnecessary delays in receiving support. Click this link for more information: Other Helpful links IBM Product Lifecycle: IBM InfoSphere Guardium v9 Announcement: bin/ssialias?subtype=ca&infotype=an&appname=isource&supplier=897&letternum=enusc13-042# Recorded tech talks for InfoSphere Guardium V9 bit.ly/guardwiki 7

8 InfoSphere Guardium v9.0, v9.0p02, v9.0p50, v9.0p100, v9.0p150, v9.0p200 V9.1 V9.0 patch 200 V9.1 V9.0 patch 150 V9.1 patch 200 Detailed Release Notes (April 2014) V9.1 patch 150 Detailed Release Notes (November 2013) Release notes; Technical reqs. System reqs. V9.1 Software Appliance Technical Requirements (January 2014) V9.1 System Requirements (Platforms Supported) (modify date ) V9.1 V9.0 patch V9.1 GPU patch 100 Detailed Release Notes (October 2013) Release notes; Data sheet; Technical reqs; System reqs V9.1 Datasheet - IBM InfoSphere Guardium V9.1 helps you protect your high-value data and automate your compliance policies bin/ssialias?infotype=an&subtype=ca&htmlfid=897/enus &appname=usn V9.1 Software Appliance Technical Requirements (October 2013) V9.1 System Requirements (Platforms Supported) (October 2013) 8

9 V9.0 patch 50 V9.0 GPU patch 50 Detailed Release Notes (June 2013) For new and enhanced features, see V9.0 patch 02 GPU for v9.0 patch 02 release notes (Nov. 2012) V9.0 V9.0 Release Notes (2-page with hyperlinks to V9.0 announcement documents) (Oct 2012) V9.0 Detailed release notes (Oct 2012) For new and enhanced features, see V9.0 Filenames and MD5SUMs (Oct 2012) For S-TAP versions and MD5SUMs, see V9.0 Software Appliance Technical Requirements (August 2013) V9.0 System Requirements (Platforms Supported) (August 2013) V9.0 Datasheet The IBM InfoSphere Guardium V9.0 announcement can be found at 9

10 The "Deployment Guide for InfoSphere Guardium" has been released and is now available for the general public at the IBM Redbooks link below: April 07 IBM InfoSphere Guardium Version 9.1 Licensed Materials - Property of IBM. Copyright IBM Corp U.S. Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp. IBM, the IBM logo, and ibm.com are trademarks or registered trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at Copyright and trademark information ( 10