System Requirements/ Platforms supported for IBM Guardium v11.2

Created by Anu Baskar on Thu, 03/12/2020 - 10:44
Published URL:
https://www.ibm.com/support/pages/node/5736879
5736879

Detailed System Requirements


Abstract

This document summarizes the recommended hardware, supported databases and operating systems for IBM Guardium v11.2.

Content

Links to system requirements and supported platforms documentation for other versions of Guardium: http://www.ibm.com/support/docview.wss?uid=ibm10876538

Attention: Guardium Data Protection tries to support new versions of existing data sources as quickly as possible. Typically, new versions are supported within three (3) months of release, but support for some data sources may take longer.

 

Supported platforms database

For Guardium V11.0 and later, most supported platforms information is available through the Guardium supported platforms database.

Information about data sources supported by External S-TAP and about IBM i support is documented in the following sections.

 

External S-TAP

External S-TAP is a component of Guardium that can intercept traffic for cloud and on-premises database services without installing an inspection agent on the database server. For more information, see Guardium External S-TAP in the IBM Guardium Knowledge Center.

The External S-TAP service for Cloud Pak for Data can target all databases supported by External S-TAP as well as databases hosted on Cloud Pak for Data for compliance monitoring and data security. For more information, see Guardium External S-TAP in the Cloud Pak for Data Knowledge Center.

Data source

Supported versions

Notes
Amazon Aurora Mysql All Versions Available for Amazon RDS cloud.
Amazon Aurora PostgreSQL All Versions Available for Amazon RDS cloud.
Amazon Redshift All Versions Available for Amazon Redshift.
Amazon DynamoDB All Versions Available for Amazon DynamoDB
AWS Fargate All Versions Available for AWS Fargate
Db2 Advanced Edition 11.5.3 Available with Cloud Pak for Data
Db2 Warehouse (SSL enabled and non-SSL enabled)
 		 9.7, 10.1, 10.5, 11.1
 		 Available for on-premises and for IBM cloud.

Native encryption (DATA_ENCRYPT) not supported.
Db2 Warehouse 11.5.3 Available with Cloud Pak for Data
Elasticsearch 6.8, 7.4
Elastic search 6.8 available on IBM cloud.
Elastic search 7.4 available on AWS.
Greenplum 6.1 Available for on-premises.
GoogleCloud for Kubernetes All Versions Available for GoogleCloud for Kubernetes
MariaDB (SSL enabled and non-SSL enabled)
 		 All Versions
 		 Available for on-premises and for Amazon RDS cloud. Work with proxy protocol v2 supported S-TAP.
 
MemSQL 7.0 Available for on-premises.

Microsoft SQL Server (SSL enabled only)

 All Versions

Available for on-premises and for Microsoft Azure cloud and Amazon RDS cloud.

SSL-enabled encrypted connections are supported (including Force Protocol Encryption).
MongoDB (SSL enabled and non-SSL enabled)
 		 2.6, 3.0, 3.2, 3.4, 3.6, 4.0, 4.2
 
MongoDB 2.6 to 4.2 Available for on-premises.
MongoDB 4.2 available for on-premises , IBM cloud,AWS and Azure
MySQL (SSL enabled and non-SSL enabled)
 		 5.6, 5.7, 8.0
 		 Available for on-premises and for Amazon RDS cloud.
 
Netezza 11.0.5.0  Available for Netezza Performance server and Netezza on-prem
Oracle (SSL enabled and non-SSL enabled) 11gR1, 11gR2, 12.1, 12.2, 18.0, 18c Exadata, 19c Available for on-premises and for Amazon RDS cloud.

Note: Oracle ASO (native network encryption) is not supported.
PostgreSQL (SSL enabled and non-SSL enabled)
 		 9.x, 10.x, 11.x,12.x
 		 Available for on-premises and for Amazon RDS cloud and IBM cloud
 
Redis 4.x, 5 Available for on-premises and Cloud.
 
SQL Data Warehouse All Versions
Available for Microsoft Azure cloud.
Sybase 15.x, 16.x Available for on-premises.
Sybase IQ 15.x, 16.x Available for on-premises.
Vertica 9.3 Available for on-premises.

IBM i

Guardium supports the following IBM i operating system versions and databases:

  • IBM i versions 6.1, 7.1, 7.2, 7.3
  • IBM Db2 for i versions 7.1, 7.2, 7.3
     

Support is provided by Db2 for i S-TAP.

 

Vulnerability assessment

IBM Security Guardium provides vulnerability assessment for the following data sources.

Data source Supported versions
Amazon RDS data sources Oracle, SQL Server, MySQL, PostgreSQL
Aster 6, 6.1
Azure SQL DB All Versions
DataStax Cassandra 5.1, 6.0, 6.7
Cloudera Hadoop 5.x, 6.x
IBM Db2 (LUW) 9.7, 10.1, 10.5, 11.1, 11.5
IBM Db2 for i 6.1, 7.1, 7.2, 7.3
IBM Db2 for z/OS 10, 11, 12
IBM Informix 11.50, 11.70, 12.10, 14.10
IBM Netezza 6.0, 6.02, 7.0, 7.1, 7.2
Microsoft SQL Server 2012, 2014, 2016, 2017, 2019
MongoDB 2.6, 3.0, 3.2, 3.4, 4.0
Oracle
11gR1, 11gR2, 12.1, 12.2, 18c, 19c
Oracle MySQL 5.5, 5.6, 5.7
PostgreSQL 9x, 10x, 11x
SAP HANA 1.0, 2
SAP Sybase ASE 15.7, 16
SAP Sybase IQ 15.4, 16
Teradata 14.10, 15, 15.10, 16



 

Application Monitoring

Guardium identifies potential fraud by tracking activities of end-users who access critical tables via multi-tier enterprise applications rather than direct access to the database. This is especially important for applications that use connection pooling where all user traffic is aggregated within a few database connections, thereby masking the identity of end-users.

Guardium offers out-of-the-box support for the major off-the-shelf enterprise applications (see table below), and provides built-in tools to configure and add end-user identification for niche application and home-grown applications. Note: for most applications, some basic configuration is needed, to tailor the solution to your environment.
 

Supported Enterprise Applications

Supported Application Server Platforms
(for other enterprise & custom developed applications)

Oracle E-Business Suite

IBM WebSphere

PeopleSoft

BEA WebLogic

Siebel

Oracle Application Server (AS)

SAP

JBoss Enterprise Application Platform

Cognos

+ Others based on customer demand

Business Objects Web Intelligence

+ Others based on customer demand



 

Which data sources are supported by which Guardium products?

Guardium offers monitoring solutions for several types of data sources, including databases, data warehouses, file systems, big data platforms, and z/OS.

Company

Monitored product

Data source type

Guardium product

Apache Software

CouchDB

NoSQL

Data Protection for Big Data

Apache Software

Cassandra

NoSQL

Data Protection for Big Data

Cloudera

Cloudera

Hadoop

Data Protection for Big Data

DataStax

DataStax Enterprise

NoSQL

Data Protection for Big Data

EMC

GreenPlum DB

Data Warehouse

Data Protection for Data Warehouses

EMC

GreenPlum HD

Hadoop

Data Protection for Big Data

EMC

Pivotal

Hadoop

Data Protection for Big Data

Generic

HTTP

Application protocol

Data Protection for Databases

Generic

FTP

File System Protocol

Data Protection for Files

HortonWorks

HortonWorks

Hadoop

Data Protection for Big Data

HP

HP Vertica

Data Warehouse

Data Protection for Data Warehouses

HP

HP-UX File System

File System

Data Protection for Files

IBM

IBM Db2

Database

Data Protection for Databases

IBM

IBM Db2 Purescale

Database

Data Protection for Databases

IBM

IBM PureFlex

Database

Data Protection for Databases

IBM

IBM Db2 for i

Database

Data Protection for Databases

IBM

IBM Informix

Database

Data Protection for Databases

IBM

IBM Db2 for z/OS

Database

Data Protection for z/OS (Db2 )

IBM

IBM Db2 Analytic Accelerator for z/OS

Data Warehouse

Data Protection for z/OS (Db2 )

IBM

IBM Db2 Warehouse

Data Warehouse

Data Protection for Data Warehouses

IBM

IBM IMS

Database

Data Protection for z/OS (IMS)

IBM

IBM z/OS Data Sets (VSAM, XDAP, BDAM, BSAM, QSAM, BPAM, ISAM, OAM)

File System

Data Protection for z/OS (Data Sets)

IBM

IBM PureData System for Transaction (PDTX)

Database

Data Protection for Databases

IBM

IBM PureApplication System

Database

Data Protection for Databases

IBM

IBM Netezza

Data Warehouse

Data Protection for Data Warehouses

IBM

IBM PureData for Analytics

Data Warehouse

Data Protection for Data Warehouses

IBM

IBM PureData System for Operational Analytics (PDOA)

Data Warehouse

Data Protection for Data Warehouses

IBM

IBM BLU Acceleration

Data Warehouse

Data Protection for Data Warehouses

IBM

IBM BigInsights

Hadoop

Data Protection for Big Data

IBM

IBM InfoSphere Optim Archival

Database Tool

Data Protection for Databases

IBM

IBM Master Data Management

Database Tool

Data Protection for Databases

IBM

IBM Data Stage

Database Tool

Data Protection for Databases

IBM

AIX File System

File System

Data Protection for Files

IBM

AIX GPFS

File System

Data Protection for Files

MariaDB Foundation

MariaDB

Database

Data Protection for Databases

MemSQL Inc.

MemSQL

NoSQL

Data Protection for Big Data

Microsoft

MS SQL Server

Database

Data Protection for Databases

Microsoft

MS SQL Server Cluster

Database

Data Protection for Databases

Microsoft

Microsoft Analytics Platform System (APS)

Data Warehouse

Data Protection for Data Warehouses

Microsoft

Windows File Share (WFS)

File System Protocol

Data Protection for Files

Microsoft

MS File System

File System

Data Protection for Files

MongoDB

MongoDB

NoSQL

Data Protection for Big Data

Novell

SuSe File System

File System

Data Protection for Files

Oracle

Oracle Database

Database

Data Protection for Databases

Oracle

Oracle Database RAC

Database

Data Protection for Databases

Oracle

Oracle Sun MySQL

Database

Data Protection for Databases

Oracle

Oracle Sun MySQL Cluster

Database

Data Protection for Databases

Oracle

Oracle Exadata

Data Warehouse

Data Protection for Data Warehouses

PostgreSQL

PostgreSQL

Database

Data Protection for Databases

RedHat

RedHat File System

File System

Data Protection for Files

SAP

SAP Sybase ASE

Database

Data Protection for Databases

SAP

SAP Sybase IQ

Database

Data Protection for Databases

SAP

SAP HANA

In-memory Database

Data Protection for Databases

SAP

SAP HANA Appliance

In-memory Data Warehouse

Data Protection for Data Warehouses

Teradata

Teradata

Data Warehouse

Data Protection for Data Warehouses

Teradata

Teradata Aster DB

Hadoop

Data Protection for Big Data

Ubuntu

Ubuntu File System

File System

Data Protection for Files



 

Supported web browsers

The Guardium UI supports the following web browsers and display resolutions:
  • Firefox ESR 52 and later
  • Chrome 70 and later
  • Display resolution 1366 x 768 or greater


 

Guardium deployment on cloud

Guardium supports deployment on several cloud platforms.  



 

Hardware and virtual machine requirements

Guardium is available as a hardware or software offering, ensuring the solution can be easily deployed in a wide variety of environments. As a hardware offering, the solution is delivered with licensed software fully loaded and tested on a physical appliance provided by IBM (hardware appliance). When delivered as a software offering, the solution is delivered as software images ready to be deployed by the user on their own hardware (software appliance), either directly or as virtual appliances. 

IBM Security Guardium can be installed on RedHat Enterprise Virtualization, VMware Virtualization, and Microsoft Hyper-V.

For more information on technical requirements, see https://www.ibm.com/support/pages/node/5736891

 


 

End of service information

Guardium supports database and operating system versions up to their End-of-Service (EOS), Premier, or Mainstream support end dates. For IBM, they are published in http://www-01.ibm.com/software/support/lifecycle/ . For other vendors, contact your vendor representative to confirm their support end dates. IBM offers optional extended service support after EOS. Contact your IBM representative for further information. Guardium will support the hardware system it is running on up to the End-of Marketing (EOM) date plus 5 years or end of support date, whichever is sooner.
 

Not all functionality is available in all configurations. For more information, contact an IBM Security Sales Representative at: https://www.ibm.com/connect/ibm/us/en/?lnk=fcw

Internal Use Only

Submitting updates for Guardium system requirements / platforms supported documents: 
Guardium_how_to_update_sys_reqs-20180816_0.pdf

Date 

(yyyy-mm-dd)

 Name of the editor Summary of the update

Edit Requested by

(name of source)
2018-09-25 Joey Cheng Chi Hung

Removed UNIX/ from Supported data source table's Notes column from these rows: Teradata, IBM BigInsights, Cloudera, Aster, Cassandra, CouchDB, Greenplum DB, Horton Works, MariaDB, MemSQL, MongoDB mgo client (version 2), SAP HANA, HP Vertica

 Sujana Subedi
2018-10-18 Tal Perlov Added comment to Oracle MySQL and MySQL cluster that Shared Memory traffic is not supported by Windows S-TAP. Satoshi
2018-10-25 Joey Cheng Chi Hung Added ", SSL encryption not supported" to Aster's row's Notes column in Supported data source table Ofra Shinitzky-Carmel
2018-10-26 Anu Baskar Created empty External S-TAP table for QA to populate. Added description of External S-TAP.
2018-10-26 Matt Novak Moved the new "External S-TAP" section to just after the "Client-side requirements for S-TAP" section to keep the traditional S-TAP content together (still not perfectly coherent, but better than it was).
2018-12-04 Usha Shama Added matrix table for Supported Data Source Platforms for Guardium External S-TAP
2018-12-04 Joey Cheng Chi Hung

Update "What Guardium features work with nonSQL databases" table

Changed from No to Yes: CouchDB Blocking, CouchDB Redaction, Cassandra Encryption

Hadoop Blocking changed from Yes (HIVE&IMPALA) to Yes (Hortonworks Ranger Integration) Hadoop Instance Discovery changed from No to Yes (HTTP)

Hadoop SSL changed from No to Yes (Ranger, Navigator)

Cassandra SSL changed from No to Yes (Datastax 6.0.0+)

CouchDB Failed Login: changed from Yes to No

 Sujana Subedi
2018-12-05 Kay Chen

S-TAP for Data Set.  Removed zOS 1.13, added zOS 2.3 and prereq needed for Data Set STAP version 10 and 9.1.

S-TAP for IMS.  Added IMS 12, 15, added the prereq needed for IMS STAP 10.

S-TAP for Db2.  Version 9.0 EOS at 09-30-17, so removed version 9.0 statement from notes.
2018-12-05 Joey Cheng Chi Hung

Update "What Guardium features work with nonSQL databases" table

Changed from No to Yes: Cassandra Encryption

Update "Data Source and Supported" table

IBM BigInsghts: added 4.2.5, removed 4.1

Cloudera: added 5.12.2

AsterDB: removed 6

Added new row: Datastax, 6.0.0, Support by Linux only, SSL supported

CouchDB: removed 1.2.2, 1.5.1, added 2.1.1, in note, added "Supported by Linux and Windows"

Greenplum DB: removed 4.3.4, added 4.3.19, 5.7

Changed Horton Works to Hortonworks, removed 2.2, 2.3, added 2.6

MongoDB: removed 3.0, added 4.0

MongoDB mgo client (version 2): removed 2.6.8, added 4.0

MongoDB Compass client (version 1.14, 1.15, 1.16): added 4.0

SAP HANA: added 2.0

 Sujana Subedi
2018-12-05 Ritu Raghuwanshi

Removed / Edited UNIX/ from Supported data source table's Notes column from these rows:

Oracle (including ASO/SSL) removed 11gR1 from all as oracle removed support in Jan 2018

Oracle (including ASO/SSL) added Oracle 12.2 ASO/SSL supported on AIX, Solaris, Linux and HP-UX[only ASO].

Oracle RAC (including ASO/SSL) updated note Oracle 12.2 ASO/SSL supported on AIX and Linux .

Oracle Exadata (including ASO/SSL)removed unix stap as no environment available in lab

IBM Db2 (Linux, UNIX)removed (including BLU acceleration), Db2 Warehouse not sure what that refers to.

IBM Informixremoved 11.50, no longer supported by ibm

Oracle MySQL and MySQL Clusterremoved 5.5 and 5.6, no longer in support by oracle

IBM Netezzaremoved 5.0 6.0 , no longer in support

PostgreSQLremoved no longer in support and added new

Teradataremoved no longer in support and added new. Added notes for exit and atap support.

SAP Sybase ASEand SAP Sybase IQ added 16.1

MemSQLupdated version
2018-12-06 Soonnee Chang Updated Supported web browsers  Sujana Subedi
2018-12-10 Anu Baskar Title corrected from 10.5 to 10.6. Replaced 10.5 KC links to 10.6.
2018-12-17 Tali Perlov Updated MSSQL to include MS SQL Server 2017

Updated Oracle notes to clearly state that Oracle SSL is not supported on Windows, only ASO.
2018-12-17 Ritu Raghuwanshi Update oracle 18 in supported matrix
2018-12-18 Tali Perlov Removed all mentions of SSL for Oracle support for windows S-TAP. Removed support for Oracle 11gR1
2018-12-18 Anu Baskar Link to 10.5 matrix added Calvin Bench
2019-01-04 Joey Cheng Chi Hung

Updated Oracle (including ASO/SSL)'s Notes session to add 12.2, 18c:

Query Rewrite not supported for Oracle 12.1, 12.2, 18c.

Updated Oracle RAC (including ASO/SSL)'s Notes session to add 12.2:

Query Rewrite not supported for Oracle 12.1, 12.2.

Updated Oracle Exadata (including ASO/SSL)'s Notes session to add 12.2:

Query Rewrite not supported for Oracle 12.1, 12.2.

 Varun Sud
2019-01-04 Joey Cheng Chi Hung

Updated Oracle (including ASO/SSL)'s Notes session:

Query Rewrite not supported for Oracle 12.1 and above.

Updated Oracle RAC (including ASO/SSL)'s Notes session:

Query Rewrite not supported for Oracle 12.1 and above.

Updated Oracle Exadata (including ASO/SSL)'s Notes session:

Query Rewrite not supported for Oracle 12.1 and above.

 Amy Wong
2019-02-08 Ritu Raghuwanshi Added oracle 18c under Oracle rac support Sujana Subedi
2019-01-10 Joey Cheng Chi Hung Added 10.1.29 under MariaDB support Sujana Subedi
2019 -01-17 David Labrie Updated Databases Supported for VA and also updated the No SQL Support table.   Louis Lam
2019-02-06 Anu Baskar 10.6 document cloned to create draft v11.0 document. No changes to content apart from renaming 10.6 to v11.0 in the title.
2019-06-19 Matt Novak Updated external S-TAP table with content provided by Ofra (via Christopher Foran). Ofra
2019-07-17 Anu Baskar Replaced the technical requirements table with a link to the appliance technical requirements technote
2019-08-02 Usha Shama Updated External S-TAP table for Microsoft SQL Server and SQL Data Warehouse with External S-TAP version for Microsoft Azure cloud Sujana Subedi
2019-08-13 David Labrie Added VA support for DataMax Cassandra Louis Lam
2019-09-19 Ritu Raghuwanshi Added Oracle Exadata for external stap support Sujana Subedi
2019-12-05 Matt Novak Updated VA support for Db2 i to include V7.4 GRD-36692
2020-01-20 David Labrie Updated VA support matrix Louis Lam
2020-01-27 Ritu Raghuwanshi  Remove the following:

the requirement for sql  db warehouse  :   Requires External S-TAP V11.0.0.108 or later for Microsoft Azure cloud.     (We have fixed in all versions)

Add the following:

Sybase  15.x, 16.x         Available for on-premises
Sybase IQ 15.x, 16.x      Available for on-premises
Redis        4.x                      Available for on-premises
Mysql           5.6, 5.7 ,8.0          Available for on-premises and on Amzon RDS cloud
PostgreSQL  9.x,10.x,11.x       Available for on-premises and on Amzon RDS cloud

Update the following:
Amazon Aurora MysqlSQL       All versions
Amazon Aurora PostgreSQL    All versions

and the link  Guardium External S-TAP on the same page  points to the old document in v10.6 which should be updated as well
 		 Jennifer Peng
06-12-2020 Ritu Raghuwanshi
PostgreSQL 12.1 (AWS) Document says all version for Amazon Aurora PostgreSQL
DynamoDB (AWS) Amazon DynamoDB All Versions Available for Amazon DynamoDB
MongoDB 4.2 (IBM Cloud) MongoDB 4.2 available for on-premises , IBM cloud,AWS and Azure
MongoDB Atlas 4.2 (AWS) MongoDB 4.2 available for on-premises , IBM cloud,AWS and Azure
MongoDB Atlas 4.2 (Azure) MongoDB 4.2 available for on-premises , IBM cloud,AWS and Azure
Elasticsearch 7.4 (AWS) Elastic search 7.4 available on AWS
Elasticsearch 6.8 (IBM Cloud) Elastic search 6.8 available on IBM cloud
Redis 5 (IBM Cloud) added to redis
MemSQL 7.0 Available for on-premises.
Greenplum 6.1 Available for on-premises.
Vertica 9.3 Available for on-premises.
removed versions for MariaDB adeed ALL versions
added oracle 19c
Removed Requires External S-TAP V11.0.0.108 or later for Microsoft Azure cloud. problem is fixed now
Postgres 12.x and ibm cloud for postgres sql
Sujana Subedi
6-18-20 Added table for External S-TAP service for Cloud Pak for Data.

Updated all mentions of DB2 to Db2.

Alphabetized the External S-TAP list.
8-10-20 Ritu GoogleCloud for Kubernetes | All Versions | Available for GoogleCloud for Kubernetes
AWS Fargate                         | All Versions | Available for AWS Fargate		 Amy/Benazeer
10-20-2020 Ritu Added Netezza nad NPS support Miriam/Rich
10-23-2020 Miriam
Per discussion with Rich, deleted table for External S-TAP for CP4D and added CP4D platforms into
the External S-TAP table.
2022-06-27 Matt Novak Remove statement of Internet Explorer browser support Amy Wong
2023-12-22 Matt Novak Added note about providing platforms support within 3 months Tania/Amy

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSMPHH","label":"IBM Security Guardium"},"ARM Category":[{"code":"a8m0z000000Gp0VAAS","label":"SYSTEM REQUIREMENTS"}],"ARM Case Number":"","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF016","label":"Linux"},{"code":"PF027","label":"Solaris"},{"code":"PF033","label":"Windows"},{"code":"PF035","label":"z\/OS"}],"Version":"11.2.0","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
22 December 2023

UID

ibm15736879

Page Feedback