tag:blogger.com,1999:blog-1324204528832806642024-03-06T12:01:47.613-08:00INSIGHTSINSIGHTS - The Information Insights LLC BlogInformation Insightshttp://www.blogger.com/profile/01560037005312811863noreply@blogger.comBlogger24125tag:blogger.com,1999:blog-132420452883280664.post-62771297739187610792017-04-21T11:53:00.000-07:002017-04-21T11:53:19.454-07:00The Doctor Is In: Guardium Healthcare Panel Highlights<br />
<div class="MsoNormal">
We’ve been back from InterConnect for a while now and we
can’t stop talking about what a great conference it was! Hats off to the IBM
events team for smooth execution, interesting session topics and cool demos. We
are already looking forward to next year. <o:p></o:p></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
Information Insights was fortunate enough to participate in
a Guardium Healthcare panel alongside Scott Benaglio from BlueCross BlueShield
of Western New York (BCBS WNY) and<i style="mso-bidi-font-style: normal;"> </i>Gary
Wright from <i style="mso-bidi-font-style: normal;">Scripps Health. </i>Entitled <b style="mso-bidi-font-weight: normal;">The Doctor is In: Data Protection for
Healthcare, </b>the panel discussion covered different experiences implementing
and deploying Guardium within the healthcare industry. Below, we’ve recapped
the main ideas shared during the session plus some takeaways you can apply to
the tactical daily work of implementing Guardium.<span style="mso-spacerun: yes;"> </span><o:p></o:p></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal" style="mso-outline-level: 1;">
Special thanks to our moderator Cindy
Compert from IBM for keeping us on track – that was no easy task!<o:p></o:p></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<b style="mso-bidi-font-weight: normal;"><i style="mso-bidi-font-style: normal;">The Doctor Is In: </i></b>Guardium Healthcare Panel<b style="mso-bidi-font-weight: normal;"><i style="mso-bidi-font-style: normal;"><br />
</i></b>IBM InterConnect 2017 | Main Ideas and Key Takeaways<o:p></o:p></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<b style="mso-bidi-font-weight: normal;"><i style="mso-bidi-font-style: normal;">There should be a legitimate security need for Guardium. </i></b>We
often see Guardium purchased and deployed merely to check off a compliance box.
Unfortunately, the natural result in this scenario is an unhappy Guardium user,
a lack of wide adoption, a perceived low ROI, and an underutilization of
Guardium’s true database security insight. However, when there is an outlined
need and a plan in place prior to purchasing Guardium, organizations are much
more successful. Having an idea of your need or plan doesn’t mean you have to
go through end to end process planning before you implement or even purchase!<span style="mso-spacerun: yes;"> </span>However, having a solid business driver
behind your decision will not only help guide the direction of the
implementation, but will also provide you with a goal line to strive towards in
order to prove that Guardium is adding value to your organization. Having a
vision (however faint!) for how Guardium can help better secure your healthcare
system databases will allow you to structure your implementation toward that vision
and then expand as your use of Guardium matures.<span style="mso-spacerun: yes;"> </span><b style="mso-bidi-font-weight: normal;"><i style="mso-bidi-font-style: normal;"><o:p></o:p></i></b></div>
<div class="MsoListParagraph">
<br /></div>
<div class="MsoNormal">
<b style="mso-bidi-font-weight: normal;"><i style="mso-bidi-font-style: normal;">Know your users and what value Guardium brings to their job role. </i></b>As
Guardium advocates, we tend to over anticipate how interested administrators
may be when presented with new capabilities and data our solutions can provide.
After consistently seeing a lack of interest at the beginning of BCBS WNY’s
Guardium journey, Scott took a step back and found that really taking the time
to understand what different database administrators cared about helped him deploy
Guardium in a useful way. For Scott, now folks like Systems Architects are very
interested in using Guardium to help them make project decisions that aren’t
even security related! <o:p></o:p></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<b style="mso-bidi-font-weight: normal;"><i style="mso-bidi-font-style: normal;">Develop a phased maturity plan. </i></b>It’s unrealistic to make a
quick transition from deployment to sending real time alerts with Guardium. By
developing a maturity plan, you can understand where your database protection
is today and what measures are needed to get where you want to be. This “grow-once-you-know”
approach helps educate users on what results Guardium can produce and gives
them time to feel comfortable with the reports they receive. BCBS WNY laid out
their maturity model in three phases: Reactionary, Proactive and Real Time.
Within these three phases, they listed out exactly how they planned to use
Guardium on a day-to-day basis and used each phase as a building block to get
to the next. <b style="mso-bidi-font-weight: normal;"><i style="mso-bidi-font-style: normal;"><o:p></o:p></i></b></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<b style="mso-bidi-font-weight: normal;"><i style="mso-bidi-font-style: normal;">Understand what happens to data assets throughout the database system
and how that relates to relationships with the organization. <span style="mso-spacerun: yes;"> </span></i></b>Understanding these relationships is
essential to understanding how people interact with databases across the
organization, not just by person or department. Analyzing this data helps you
know if the correct security controls that are dictated by healthcare protocols
are in place and performing properly. <o:p></o:p></div>
<div class="MsoNormal">
<br /></div>
<!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:AllowPNG/>
</o:OfficeDocumentSettings>
</xml><![endif]-->
<!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves/>
<w:TrackFormatting/>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>EN-US</w:LidThemeOther>
<w:LidThemeAsian>X-NONE</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="false"
DefSemiHidden="false" DefQFormat="false" DefPriority="99"
LatentStyleCount="380">
<w:LsdException Locked="false" Priority="0" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 6"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 7"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 8"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 9"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 9"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Normal Indent"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="footnote text"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="annotation text"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="header"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="footer"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index heading"/>
<w:LsdException Locked="false" Priority="35" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="table of figures"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="envelope address"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="envelope return"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="footnote reference"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="annotation reference"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="line number"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="page number"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="endnote reference"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="endnote text"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="table of authorities"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="macro"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="toa heading"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Bullet"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Number"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Bullet 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Bullet 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Bullet 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Bullet 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Number 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Number 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Number 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Number 5"/>
<w:LsdException Locked="false" Priority="10" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Closing"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Signature"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="true"
UnhideWhenUsed="true" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text Indent"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Continue"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Continue 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Continue 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Continue 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Continue 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Message Header"/>
<w:LsdException Locked="false" Priority="11" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Salutation"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Date"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text First Indent"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text First Indent 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Heading"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text Indent 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text Indent 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Block Text"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Hyperlink"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="FollowedHyperlink"/>
<w:LsdException Locked="false" Priority="22" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Document Map"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Plain Text"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="E-mail Signature"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Top of Form"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Bottom of Form"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Normal (Web)"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Acronym"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Address"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Cite"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Code"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Definition"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Keyboard"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Preformatted"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Sample"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Typewriter"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Variable"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Normal Table"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="annotation subject"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="No List"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Outline List 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Outline List 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Outline List 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Simple 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Simple 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Simple 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Classic 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Classic 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Classic 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Classic 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Colorful 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Colorful 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Colorful 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Columns 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Columns 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Columns 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Columns 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Columns 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 6"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 7"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 8"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 6"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 7"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 8"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table 3D effects 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table 3D effects 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table 3D effects 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Contemporary"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Elegant"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Professional"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Subtle 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Subtle 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Web 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Web 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Web 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Balloon Text"/>
<w:LsdException Locked="false" Priority="39" Name="Table Grid"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Theme"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 6"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 7"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 8"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 9"/>
<w:LsdException Locked="false" SemiHidden="true" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" SemiHidden="true" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" QFormat="true"
Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" QFormat="true"
Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" QFormat="true"
Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" QFormat="true"
Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" QFormat="true"
Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" QFormat="true"
Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" SemiHidden="true"
UnhideWhenUsed="true" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="TOC Heading"/>
<w:LsdException Locked="false" Priority="41" Name="Plain Table 1"/>
<w:LsdException Locked="false" Priority="42" Name="Plain Table 2"/>
<w:LsdException Locked="false" Priority="43" Name="Plain Table 3"/>
<w:LsdException Locked="false" Priority="44" Name="Plain Table 4"/>
<w:LsdException Locked="false" Priority="45" Name="Plain Table 5"/>
<w:LsdException Locked="false" Priority="40" Name="Grid Table Light"/>
<w:LsdException Locked="false" Priority="46" Name="Grid Table 1 Light"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark"/>
<w:LsdException Locked="false" Priority="51" Name="Grid Table 6 Colorful"/>
<w:LsdException Locked="false" Priority="52" Name="Grid Table 7 Colorful"/>
<w:LsdException Locked="false" Priority="46"
Name="Grid Table 1 Light Accent 1"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2 Accent 1"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3 Accent 1"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4 Accent 1"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark Accent 1"/>
<w:LsdException Locked="false" Priority="51"
Name="Grid Table 6 Colorful Accent 1"/>
<w:LsdException Locked="false" Priority="52"
Name="Grid Table 7 Colorful Accent 1"/>
<w:LsdException Locked="false" Priority="46"
Name="Grid Table 1 Light Accent 2"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2 Accent 2"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3 Accent 2"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4 Accent 2"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark Accent 2"/>
<w:LsdException Locked="false" Priority="51"
Name="Grid Table 6 Colorful Accent 2"/>
<w:LsdException Locked="false" Priority="52"
Name="Grid Table 7 Colorful Accent 2"/>
<w:LsdException Locked="false" Priority="46"
Name="Grid Table 1 Light Accent 3"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2 Accent 3"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3 Accent 3"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4 Accent 3"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark Accent 3"/>
<w:LsdException Locked="false" Priority="51"
Name="Grid Table 6 Colorful Accent 3"/>
<w:LsdException Locked="false" Priority="52"
Name="Grid Table 7 Colorful Accent 3"/>
<w:LsdException Locked="false" Priority="46"
Name="Grid Table 1 Light Accent 4"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2 Accent 4"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3 Accent 4"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4 Accent 4"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark Accent 4"/>
<w:LsdException Locked="false" Priority="51"
Name="Grid Table 6 Colorful Accent 4"/>
<w:LsdException Locked="false" Priority="52"
Name="Grid Table 7 Colorful Accent 4"/>
<w:LsdException Locked="false" Priority="46"
Name="Grid Table 1 Light Accent 5"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2 Accent 5"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3 Accent 5"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4 Accent 5"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark Accent 5"/>
<w:LsdException Locked="false" Priority="51"
Name="Grid Table 6 Colorful Accent 5"/>
<w:LsdException Locked="false" Priority="52"
Name="Grid Table 7 Colorful Accent 5"/>
<w:LsdException Locked="false" Priority="46"
Name="Grid Table 1 Light Accent 6"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2 Accent 6"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3 Accent 6"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4 Accent 6"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark Accent 6"/>
<w:LsdException Locked="false" Priority="51"
Name="Grid Table 6 Colorful Accent 6"/>
<w:LsdException Locked="false" Priority="52"
Name="Grid Table 7 Colorful Accent 6"/>
<w:LsdException Locked="false" Priority="46" Name="List Table 1 Light"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark"/>
<w:LsdException Locked="false" Priority="51" Name="List Table 6 Colorful"/>
<w:LsdException Locked="false" Priority="52" Name="List Table 7 Colorful"/>
<w:LsdException Locked="false" Priority="46"
Name="List Table 1 Light Accent 1"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2 Accent 1"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3 Accent 1"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4 Accent 1"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark Accent 1"/>
<w:LsdException Locked="false" Priority="51"
Name="List Table 6 Colorful Accent 1"/>
<w:LsdException Locked="false" Priority="52"
Name="List Table 7 Colorful Accent 1"/>
<w:LsdException Locked="false" Priority="46"
Name="List Table 1 Light Accent 2"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2 Accent 2"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3 Accent 2"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4 Accent 2"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark Accent 2"/>
<w:LsdException Locked="false" Priority="51"
Name="List Table 6 Colorful Accent 2"/>
<w:LsdException Locked="false" Priority="52"
Name="List Table 7 Colorful Accent 2"/>
<w:LsdException Locked="false" Priority="46"
Name="List Table 1 Light Accent 3"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2 Accent 3"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3 Accent 3"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4 Accent 3"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark Accent 3"/>
<w:LsdException Locked="false" Priority="51"
Name="List Table 6 Colorful Accent 3"/>
<w:LsdException Locked="false" Priority="52"
Name="List Table 7 Colorful Accent 3"/>
<w:LsdException Locked="false" Priority="46"
Name="List Table 1 Light Accent 4"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2 Accent 4"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3 Accent 4"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4 Accent 4"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark Accent 4"/>
<w:LsdException Locked="false" Priority="51"
Name="List Table 6 Colorful Accent 4"/>
<w:LsdException Locked="false" Priority="52"
Name="List Table 7 Colorful Accent 4"/>
<w:LsdException Locked="false" Priority="46"
Name="List Table 1 Light Accent 5"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2 Accent 5"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3 Accent 5"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4 Accent 5"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark Accent 5"/>
<w:LsdException Locked="false" Priority="51"
Name="List Table 6 Colorful Accent 5"/>
<w:LsdException Locked="false" Priority="52"
Name="List Table 7 Colorful Accent 5"/>
<w:LsdException Locked="false" Priority="46"
Name="List Table 1 Light Accent 6"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2 Accent 6"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3 Accent 6"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4 Accent 6"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark Accent 6"/>
<w:LsdException Locked="false" Priority="51"
Name="List Table 6 Colorful Accent 6"/>
<w:LsdException Locked="false" Priority="52"
Name="List Table 7 Colorful Accent 6"/>
</w:LatentStyles>
</xml><![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;
mso-font-charset:0;
mso-generic-font-family:auto;
mso-font-pitch:variable;
mso-font-signature:-536870145 1107305727 0 0 415 0;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;
mso-font-charset:0;
mso-generic-font-family:auto;
mso-font-pitch:variable;
mso-font-signature:-536870145 1073786111 1 0 415 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-style-unhide:no;
mso-style-qformat:yes;
mso-style-parent:"";
margin:0in;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:Calibri;
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:Calibri;
mso-fareast-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
mso-style-unhide:no;
mso-style-qformat:yes;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
mso-add-space:auto;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:Calibri;
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:Calibri;
mso-fareast-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;}
p.MsoListParagraphCxSpFirst, li.MsoListParagraphCxSpFirst, div.MsoListParagraphCxSpFirst
{mso-style-priority:34;
mso-style-unhide:no;
mso-style-qformat:yes;
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
mso-add-space:auto;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:Calibri;
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:Calibri;
mso-fareast-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;}
p.MsoListParagraphCxSpMiddle, li.MsoListParagraphCxSpMiddle, div.MsoListParagraphCxSpMiddle
{mso-style-priority:34;
mso-style-unhide:no;
mso-style-qformat:yes;
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
mso-add-space:auto;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:Calibri;
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:Calibri;
mso-fareast-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;}
p.MsoListParagraphCxSpLast, li.MsoListParagraphCxSpLast, div.MsoListParagraphCxSpLast
{mso-style-priority:34;
mso-style-unhide:no;
mso-style-qformat:yes;
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
mso-add-space:auto;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:Calibri;
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:Calibri;
mso-fareast-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;}
.MsoChpDefault
{mso-style-type:export-only;
mso-default-props:yes;
font-family:Calibri;
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:Calibri;
mso-fareast-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;
mso-header-margin:.5in;
mso-footer-margin:.5in;
mso-paper-source:0;}
div.WordSection1
{page:WordSection1;}
-->
</style>
<!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin:0in;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:Calibri;
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;}
</style>
<![endif]-->
<!--StartFragment-->
<!--EndFragment--><br />
<div class="MsoNormal">
All the panel members are passionate about IBM’s Guardium
solution and we hope our experiences serve to help other IT teams plan a
thoughtful, deliberate Guardium deployment and implementation plan. Please let
us know if Information Insights team can do anything to help promote Guardium
in your environment.<b style="mso-bidi-font-weight: normal;"><i style="mso-bidi-font-style: normal;"><o:p></o:p></i></b></div>
Information Insightshttp://www.blogger.com/profile/01560037005312811863noreply@blogger.com0tag:blogger.com,1999:blog-132420452883280664.post-48815562471200417052017-03-13T13:16:00.004-07:002017-03-16T13:06:03.712-07:00Guardium's Groupy Action at a Distance<i style="background-color: white; color: #666666; font-family: arial, tahoma, helvetica, freesans, sans-serif; font-size: 13.2px; line-height: 18.48px;">by John Haldeman, Enterprise Architect</i><br />
<br />
I've heard this a lot lately:<br />
<blockquote class="tr_bq">
<i>I updated my group and reinstalled my policy, but the change to the group doesn't look like it was applied.</i></blockquote>
(Note: See correction below. This doesn't apply to policies but only to reports)<br />
<br />
Well, this could be a result of a recent change to how groups work in Guardium. The best thing about it is that reports that use a lot of group members are going to run faster (especially if the CM is far away from the unit running the report). The worst thing about it is that you need to know more about how things work in order to see your changes applied immediately.<br />
<br />
<a name='more'></a><br />
How it used to work is that if you modified a group from any appliance you would just need to reinstall the policy. The image on the central manager was indistinguishable from the image on the collector (this seems to have been done with something like a db link for those interested in mechanics). The new behavior is that the groups used in policies and reports are locally stored on the managed unit. If you edit a group from a managed unit you are still editing the central management's view of the group, but that's not the image used in policies and reports - a local image is used.<br />
<br />
The upshot is that if you want the group membership to be reflected on the managed unit, you need to first synchronize the group definition with the managed unit in question. How do you do that? Well, you can use portal user sync:<br />
<a href="https://www.ibm.com/support/knowledgecenter/SSMPHH_10.1.0/com.ibm.guardium.doc.admin/aggregate_cm/synchronizing_portal_user_accounts.html">https://www.ibm.com/support/knowledgecenter/SSMPHH_10.1.0/com.ibm.guardium.doc.admin/aggregate_cm/synchronizing_portal_user_accounts.html</a><br />
Quote the manual:<br />
<blockquote class="tr_bq">
<i>some other definitions that are required for local processing (Groups and Group members, Audit processes, Aliases, and more) are also copied. The managed units then update their internal databases on an hourly basis. </i></blockquote>
Wait, I can run portal user sync to get the data down to my collector, but the change only happens hourly after that anyway? (this, by the way, is why your password changes don't get immediately applied after a portal synch as well). What if I want the change reflected immediately?<br />
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
The good news is you can! This is done with the special "Refresh" button under central management, which does much more than simply refresh your list of appliances. In fact, aside from group synchronization, it also does things like synchronize your custom table definitions between appliances and force a pure user synchronization. I think it does much more as well but I haven't seen a complete list. At least now you know three of the things it does!<br />
<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiOrc9GtJotsvrExSqs__TGFuaeeG9cnSBI8QwexL9DRoCs9V1zK2KFYAKrcP5WpK_orBV0ASfknqx09sjs_T0jGWiP0Nlh2fhkFsZ_lQ2JIqhHslFbmrg2wD1FuxSO2BpQI1ox-cvLNNG4/s1600/RefreshButton.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" height="171" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiOrc9GtJotsvrExSqs__TGFuaeeG9cnSBI8QwexL9DRoCs9V1zK2KFYAKrcP5WpK_orBV0ASfknqx09sjs_T0jGWiP0Nlh2fhkFsZ_lQ2JIqhHslFbmrg2wD1FuxSO2BpQI1ox-cvLNNG4/s640/RefreshButton.png" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Magic <b>"Refresh"</b> button in Manage > Central Management > Central Management does much more than refresh the view</td></tr>
</tbody></table>
<br />
Hope you find that useful.<br />
<br />
<br />
<b>*UPDATE* </b>Yosef Rozenblit and Vinay Vijayadharan provided some great comments on the behavior in the comment section and on Linked In. This does not seem to apply to policy installation. I tested it more carefully in our lab and on close inspection they are right - it only applies to reports. Thanks for the thoughtful feedback Yosef and Vinay!<br />
<br />
<br />
<br />
<br />
<br />
<br />Unknownnoreply@blogger.com0tag:blogger.com,1999:blog-132420452883280664.post-4643394080722383512017-03-07T13:48:00.000-08:002017-03-07T13:48:19.794-08:00InterConnect 2017 - See You There!<br />
<div class="MsoNormal">
<span style="font-size: small;">Attending <a href="https://www.ibm.com/cloud-computing/us/en/interconnect/">IBM InterConnect</a> later this month? Good news - we are
too! Our team is looking forward to seeing old friends and colleagues, face
time with technical experts and learning about the new technologies that are
shaping data security. <o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-size: small;">This year we went all in. We’ll be available to connect each
day in different ways. Join us in the morning for our hosted CoffeeHour at
Starbucks, attend one of our events, catch Matt Simons speaking on a data
protection healthcare panel or visit with us on the Concourse at booth 930.<o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-size: small;">We’re ready to have an engaging and exciting few days in Las
Vegas! See you there. <o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-size: small;">Here is our daily agenda: <o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<b style="mso-bidi-font-weight: normal;"><span style="font-size: small;">Sunday, March 19<sup>th</sup>
– Friends and Family Gathering<o:p></o:p></span></b></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<i style="mso-bidi-font-style: normal;"><span style="font-size: small;">Friends and Family
Gathering<o:p></o:p></span></i></div>
<div class="MsoNormal">
<span style="font-size: small;">Take a break from
InterConnect and fiesta with us for a while! Join the team at CHAYO for our
annual Friends and Family Gathering. <a href="http://events.constantcontact.com/register/event?llr=mdmecmkab&oeidk=a07edvdb6a4a9895a85">RSVP to join us. </a><o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-size: small;">5:00-7:00pm, CHAYO at The LINQ<o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-size: small;">______________________________________________________________________________<o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<b style="mso-bidi-font-weight: normal;"><span style="font-size: small;">Monday, March 20<sup>th</sup>
– CoffeeHour + jSonar and Info Insights Happy Hour <o:p></o:p></span></b></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<i style="mso-bidi-font-style: normal;"><span style="font-size: small;">CoffeeHour <o:p></o:p></span></i></div>
<div class="MsoNormal">
<span style="font-size: small;">We’ll be hosting our
CoffeeHour Monday – Wednesday at the Starbucks near The Shoppes at Mandalay
Place, right across from RM Seafood. Start your day off with your coffee on us,
and avoid the long coffee lines at the conference entrance! <o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-size: small;">7:00-8:00am, Starbucks, The Shoppes at Mandalay Place<o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<i style="mso-bidi-font-style: normal;"><span style="font-size: small;">jSonar and Info
Insights Happy Hour<o:p></o:p></span></i></div>
<div class="MsoNormal">
<span style="font-size: small;">Join our teams at one of our
favorite post-InterConnect spots for margaritas, tacos and as always, fun
conversation! Our special guest is Ron BenNathan, CTO/Founder of jSonar, previous
CTO at Guardium and renowned expert and author of database security. <a href="http://events.constantcontact.com/register/event?llr=mdmecmkab&oeidk=a07edvdgq9xdc534395">RSVP to join us. </a><o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-size: small;">5:00-7:00pm, Border Grill inside Mandalay Bay<o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-size: small;">______________________________________________________________________________<o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-size: small;"><b style="mso-bidi-font-weight: normal;">Tuesday, March 21<sup>st</sup>
-</b><span style="mso-spacerun: yes;"> </span><b style="mso-bidi-font-weight: normal;">CoffeeHour + The Doctor is in: Data Protection for Healthcare Panel<o:p></o:p></b></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<i style="mso-bidi-font-style: normal;"><span style="font-size: small;">CoffeeHour <o:p></o:p></span></i></div>
<div class="MsoNormal">
<span style="font-size: small;">We’ll be hosting our
CoffeeHour Monday – Wednesday at the Starbucks near The Shoppes at Mandalay
Place, right across from RM Seafood. Start your day off with your coffee on us,
and avoid the long coffee lines at the conference entrance! <o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-size: small;">7:00-8:00am, Starbucks, The Shoppes at Mandalay Place<o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<i style="mso-bidi-font-style: normal;"><span style="font-size: small;">The Doctor is in: Data
Protection for Healthcare Panel - Matt Simons<o:p></o:p></span></i></div>
<div class="MsoNormal">
<span style="font-size: small;">To protect patient data
across a company's fast-growing organization, greater visibility into who has
been accessing what resources and the ability to more quickly correlate and
analyze log data is essential. Join this healthcare panel to hear from
healthcare clients on: when they decided they needed data security, how they
convinced others, how they planned their security rollout, what challenges they
faced, who supported the deployment, what kinds of skills they needed, and what
were the benefits they found—including any unanticipated benefits.<o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="background: white; border: none windowtext 1.0pt; color: #323232; mso-bidi-font-family: "Times New Roman"; mso-border-alt: none windowtext 0in; mso-fareast-font-family: "Times New Roman"; padding: 0in;"><span style="font-size: small;">2:30 PM -
3:15pm, Palm A, Session ID: 6979A<o:p></o:p></span></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-size: small;">______________________________________________________________________________<o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-size: small;"><b style="mso-bidi-font-weight: normal;"><span style="background: white; border: none windowtext 1.0pt; color: #323232; mso-bidi-font-family: "Times New Roman"; mso-border-alt: none windowtext 0in; mso-fareast-font-family: "Times New Roman"; padding: 0in;">Wednesday, March 22 -</span></b><span style="background: white; border: none windowtext 1.0pt; color: #323232; mso-bidi-font-family: "Times New Roman"; mso-border-alt: none windowtext 0in; mso-fareast-font-family: "Times New Roman"; padding: 0in;"> </span><b style="mso-bidi-font-weight: normal;">CoffeeHour
+ Pre-IBM Rocks Speakeasy<o:p></o:p></b></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<i style="mso-bidi-font-style: normal;"><span style="font-size: small;">CoffeeHour <o:p></o:p></span></i></div>
<div class="MsoNormal">
<span style="font-size: small;">We’ll be hosting our
CoffeeHour Monday - Wednesday at the Starbucks near The Shoppes at Mandalay Place,
right across from RM Seafood. Start your day off with your coffee on us, and
avoid the long coffee lines at the conference entrance! <o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<i style="mso-bidi-font-style: normal;"><span style="font-size: small;">Pre-IBM Rocks @ 1923 Speakeasy<o:p></o:p></span></i></div>
<div class="MsoNormal">
<span style="font-size: small;">Join us for pre-concert
cocktails at 1923 - speakeasy style! <a href="http://events.constantcontact.com/register/event?llr=mdmecmkab&oeidk=a07edvd7512d615ee7b">RSVP to join us. </a><o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-size: small;">4:30 – 6:30pm, 1923 inside Mandalay Bay<o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-size: small;">______________________________________________________________________________<o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<b style="mso-bidi-font-weight: normal;"><span style="font-size: small;">InterConnect
Concourse<o:p></o:p></span></b></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-size: small;">We are an InterConnect exhibitor. You can find us daily on
the Concourse, booth 930. <o:p></o:p></span></div>
<div class="MsoNormal">
<br /></div>
<!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:AllowPNG/>
</o:OfficeDocumentSettings>
</xml><![endif]-->
<!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves/>
<w:TrackFormatting/>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>EN-US</w:LidThemeOther>
<w:LidThemeAsian>X-NONE</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="false"
DefSemiHidden="false" DefQFormat="false" DefPriority="99"
LatentStyleCount="380">
<w:LsdException Locked="false" Priority="0" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 6"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 7"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 8"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 9"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 9"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Normal Indent"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="footnote text"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="annotation text"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="header"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="footer"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index heading"/>
<w:LsdException Locked="false" Priority="35" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="table of figures"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="envelope address"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="envelope return"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="footnote reference"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="annotation reference"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="line number"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="page number"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="endnote reference"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="endnote text"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="table of authorities"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="macro"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="toa heading"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Bullet"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Number"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Bullet 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Bullet 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Bullet 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Bullet 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Number 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Number 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Number 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Number 5"/>
<w:LsdException Locked="false" Priority="10" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Closing"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Signature"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="true"
UnhideWhenUsed="true" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text Indent"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Continue"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Continue 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Continue 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Continue 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Continue 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Message Header"/>
<w:LsdException Locked="false" Priority="11" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Salutation"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Date"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text First Indent"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text First Indent 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Heading"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text Indent 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text Indent 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Block Text"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Hyperlink"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="FollowedHyperlink"/>
<w:LsdException Locked="false" Priority="22" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Document Map"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Plain Text"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="E-mail Signature"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Top of Form"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Bottom of Form"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Normal (Web)"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Acronym"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Address"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Cite"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Code"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Definition"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Keyboard"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Preformatted"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Sample"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Typewriter"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Variable"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Normal Table"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="annotation subject"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="No List"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Outline List 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Outline List 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Outline List 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Simple 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Simple 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Simple 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Classic 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Classic 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Classic 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Classic 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Colorful 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Colorful 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Colorful 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Columns 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Columns 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Columns 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Columns 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Columns 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 6"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 7"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 8"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 6"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 7"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 8"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table 3D effects 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table 3D effects 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table 3D effects 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Contemporary"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Elegant"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Professional"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Subtle 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Subtle 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Web 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Web 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Web 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Balloon Text"/>
<w:LsdException Locked="false" Priority="39" Name="Table Grid"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Theme"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 6"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 7"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 8"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 9"/>
<w:LsdException Locked="false" SemiHidden="true" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" SemiHidden="true" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" QFormat="true"
Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" QFormat="true"
Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" QFormat="true"
Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" QFormat="true"
Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" QFormat="true"
Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" QFormat="true"
Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" SemiHidden="true"
UnhideWhenUsed="true" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="TOC Heading"/>
<w:LsdException Locked="false" Priority="41" Name="Plain Table 1"/>
<w:LsdException Locked="false" Priority="42" Name="Plain Table 2"/>
<w:LsdException Locked="false" Priority="43" Name="Plain Table 3"/>
<w:LsdException Locked="false" Priority="44" Name="Plain Table 4"/>
<w:LsdException Locked="false" Priority="45" Name="Plain Table 5"/>
<w:LsdException Locked="false" Priority="40" Name="Grid Table Light"/>
<w:LsdException Locked="false" Priority="46" Name="Grid Table 1 Light"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark"/>
<w:LsdException Locked="false" Priority="51" Name="Grid Table 6 Colorful"/>
<w:LsdException Locked="false" Priority="52" Name="Grid Table 7 Colorful"/>
<w:LsdException Locked="false" Priority="46"
Name="Grid Table 1 Light Accent 1"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2 Accent 1"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3 Accent 1"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4 Accent 1"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark Accent 1"/>
<w:LsdException Locked="false" Priority="51"
Name="Grid Table 6 Colorful Accent 1"/>
<w:LsdException Locked="false" Priority="52"
Name="Grid Table 7 Colorful Accent 1"/>
<w:LsdException Locked="false" Priority="46"
Name="Grid Table 1 Light Accent 2"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2 Accent 2"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3 Accent 2"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4 Accent 2"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark Accent 2"/>
<w:LsdException Locked="false" Priority="51"
Name="Grid Table 6 Colorful Accent 2"/>
<w:LsdException Locked="false" Priority="52"
Name="Grid Table 7 Colorful Accent 2"/>
<w:LsdException Locked="false" Priority="46"
Name="Grid Table 1 Light Accent 3"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2 Accent 3"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3 Accent 3"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4 Accent 3"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark Accent 3"/>
<w:LsdException Locked="false" Priority="51"
Name="Grid Table 6 Colorful Accent 3"/>
<w:LsdException Locked="false" Priority="52"
Name="Grid Table 7 Colorful Accent 3"/>
<w:LsdException Locked="false" Priority="46"
Name="Grid Table 1 Light Accent 4"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2 Accent 4"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3 Accent 4"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4 Accent 4"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark Accent 4"/>
<w:LsdException Locked="false" Priority="51"
Name="Grid Table 6 Colorful Accent 4"/>
<w:LsdException Locked="false" Priority="52"
Name="Grid Table 7 Colorful Accent 4"/>
<w:LsdException Locked="false" Priority="46"
Name="Grid Table 1 Light Accent 5"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2 Accent 5"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3 Accent 5"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4 Accent 5"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark Accent 5"/>
<w:LsdException Locked="false" Priority="51"
Name="Grid Table 6 Colorful Accent 5"/>
<w:LsdException Locked="false" Priority="52"
Name="Grid Table 7 Colorful Accent 5"/>
<w:LsdException Locked="false" Priority="46"
Name="Grid Table 1 Light Accent 6"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2 Accent 6"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3 Accent 6"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4 Accent 6"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark Accent 6"/>
<w:LsdException Locked="false" Priority="51"
Name="Grid Table 6 Colorful Accent 6"/>
<w:LsdException Locked="false" Priority="52"
Name="Grid Table 7 Colorful Accent 6"/>
<w:LsdException Locked="false" Priority="46" Name="List Table 1 Light"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark"/>
<w:LsdException Locked="false" Priority="51" Name="List Table 6 Colorful"/>
<w:LsdException Locked="false" Priority="52" Name="List Table 7 Colorful"/>
<w:LsdException Locked="false" Priority="46"
Name="List Table 1 Light Accent 1"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2 Accent 1"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3 Accent 1"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4 Accent 1"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark Accent 1"/>
<w:LsdException Locked="false" Priority="51"
Name="List Table 6 Colorful Accent 1"/>
<w:LsdException Locked="false" Priority="52"
Name="List Table 7 Colorful Accent 1"/>
<w:LsdException Locked="false" Priority="46"
Name="List Table 1 Light Accent 2"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2 Accent 2"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3 Accent 2"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4 Accent 2"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark Accent 2"/>
<w:LsdException Locked="false" Priority="51"
Name="List Table 6 Colorful Accent 2"/>
<w:LsdException Locked="false" Priority="52"
Name="List Table 7 Colorful Accent 2"/>
<w:LsdException Locked="false" Priority="46"
Name="List Table 1 Light Accent 3"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2 Accent 3"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3 Accent 3"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4 Accent 3"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark Accent 3"/>
<w:LsdException Locked="false" Priority="51"
Name="List Table 6 Colorful Accent 3"/>
<w:LsdException Locked="false" Priority="52"
Name="List Table 7 Colorful Accent 3"/>
<w:LsdException Locked="false" Priority="46"
Name="List Table 1 Light Accent 4"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2 Accent 4"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3 Accent 4"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4 Accent 4"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark Accent 4"/>
<w:LsdException Locked="false" Priority="51"
Name="List Table 6 Colorful Accent 4"/>
<w:LsdException Locked="false" Priority="52"
Name="List Table 7 Colorful Accent 4"/>
<w:LsdException Locked="false" Priority="46"
Name="List Table 1 Light Accent 5"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2 Accent 5"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3 Accent 5"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4 Accent 5"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark Accent 5"/>
<w:LsdException Locked="false" Priority="51"
Name="List Table 6 Colorful Accent 5"/>
<w:LsdException Locked="false" Priority="52"
Name="List Table 7 Colorful Accent 5"/>
<w:LsdException Locked="false" Priority="46"
Name="List Table 1 Light Accent 6"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2 Accent 6"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3 Accent 6"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4 Accent 6"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark Accent 6"/>
<w:LsdException Locked="false" Priority="51"
Name="List Table 6 Colorful Accent 6"/>
<w:LsdException Locked="false" Priority="52"
Name="List Table 7 Colorful Accent 6"/>
</w:LatentStyles>
</xml><![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;
mso-font-charset:0;
mso-generic-font-family:auto;
mso-font-pitch:variable;
mso-font-signature:-536870145 1107305727 0 0 415 0;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;
mso-font-charset:0;
mso-generic-font-family:auto;
mso-font-pitch:variable;
mso-font-signature:-536870145 1073786111 1 0 415 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-style-unhide:no;
mso-style-qformat:yes;
mso-style-parent:"";
margin:0in;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:Calibri;
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:Calibri;
mso-fareast-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;}
.MsoChpDefault
{mso-style-type:export-only;
mso-default-props:yes;
font-family:Calibri;
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:Calibri;
mso-fareast-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;
mso-header-margin:.5in;
mso-footer-margin:.5in;
mso-paper-source:0;}
div.WordSection1
{page:WordSection1;}
-->
</style>
<!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin:0in;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:Calibri;
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;}
</style>
<![endif]-->
<!--StartFragment-->
<!--EndFragment--><br />
<div class="MsoNormal">
<span style="font-size: small;">We hope to see you at InterConnect! Please feel free to
reach out to us with questions: <a href="mailto:bill@infoinsightsllc.com">bill@infoinsightsllc.com</a><o:p></o:p></span></div>
<div class="MsoNormal">
<span style="font-size: small;"><br /></span></div>
<div class="MsoNormal">
<span style="font-size: small;"><br /></span></div>
<div class="MsoNormal">
<br /></div>
Information Insightshttp://www.blogger.com/profile/01560037005312811863noreply@blogger.com0tag:blogger.com,1999:blog-132420452883280664.post-214817686767081412016-12-14T15:48:00.001-08:002016-12-14T16:17:57.751-08:00Building a New Column to List the Guardium Group Membership of DB Users<i style="background-color: white; color: #666666; font-family: arial, tahoma, helvetica, freesans, sans-serif; font-size: 13.2px; line-height: 18.48px;">by John Haldeman, Enterprise Architect</i><br />
<span style="background-color: white; color: #666666; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13.2px;"><span style="font-size: 13.2px; line-height: 18.48px;"><br /></span></span><span style="background-color: white; color: #666666; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13.2px;"><span style="font-size: 13.2px; line-height: 18.48px;">Sometimes it's useful to know whether some of the data shown in a report is in a Guardium group without having to look up the group data elsewhere or modifying your conditions.</span></span><br />
<span style="background-color: white; color: #666666; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13.2px;"><span style="font-size: 13.2px; line-height: 18.48px;"><br /></span></span>
<span style="background-color: white; color: #666666; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13.2px;"><span style="font-size: 13.2px; line-height: 18.48px;">Let's take an example. Say you have three classifications of user:</span></span><br />
<br />
<ol>
<li><span style="background-color: white;"><span style="color: #666666;">DBAs or other highly privileged users</span></span></li>
<li><span style="background-color: white;"><span style="color: #666666;">Non-DBA, direct-access users: people that connect directly with personal accounts</span></span></li>
<li><span style="background-color: white;"><span style="color: #666666;">Service accounts: users that belong to application or batch processes</span></span></li>
</ol>
<br />
<span style="background-color: white; color: #666666; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13.2px;"><span style="font-size: 13.2px; line-height: 18.48px;">You want a report showing all connections but a column indicating that the user is in one of those groups or unclassified.</span></span><br />
<br />
<a name='more'></a><br />
<span style="color: #666666; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif;"><span style="background-color: white; font-size: 13.2px;">It should be noted that you can do what I'm describing by color coding your reports. That works great in V9 (I have trouble with it in V10), but it doesn't work so well if you frequently export data to CSV files. Also, if you want to reuse the definition you need to recreate the color coding over and over again for each report - not very convenient.</span></span><br />
<span style="color: #666666; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif;"><span style="background-color: white; font-size: 13.2px;"><br /></span></span>
<span style="color: #666666; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif;"><span style="background-color: white; font-size: 13.2px;">The method this post discusses creates a custom computed column that looks into the GROUP tables of Guardium and then gives you a field in your report showing which groups the users belong to. It looks something like this:</span></span><br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj2w0Cwfoa7DijQq-0vnOkAzBo3d71nRCGhjZ3_Pw3wu7qgqAfL5YEzPWe90TGJFf8-ojJAuUKoV0ldWLFThx5EyOlenHxHKRQT271FVHgxIs2-wjQZZR9K3XnKobG5JfegtxonsPbg0DvG/s1600/ReportWithGroups.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj2w0Cwfoa7DijQq-0vnOkAzBo3d71nRCGhjZ3_Pw3wu7qgqAfL5YEzPWe90TGJFf8-ojJAuUKoV0ldWLFThx5EyOlenHxHKRQT271FVHgxIs2-wjQZZR9K3XnKobG5JfegtxonsPbg0DvG/s640/ReportWithGroups.png" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Report Showing Computed Column that Lists DB User Group Membership</td></tr>
</tbody></table>
<span style="color: #666666; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif;"><span style="background-color: white; font-size: 13.2px;">If this is something you're interested in doing, you can execute the following grdAPI call from the CLI to add the column:</span></span><br />
<blockquote class="tr_bq">
<span style="color: #666666; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif;"><span style="background-color: white; color: blue; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13.2px;">grdapi </span><span style="background-color: white; color: purple; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13.2px;">create_computed_attribute</span><span style="background-color: white; color: #666666; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13.2px;"> attributeLabel=</span><span style="background-color: white; color: #990000; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13.2px;">"User In Groups"</span><span style="background-color: white; color: #666666; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13.2px;"> entityLabel=</span><span style="background-color: white; color: #990000; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13.2px;">"Client/Server"</span><span style="background-color: white; color: #666666; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13.2px;"> expression=</span><span style="background-color: white; color: #990000; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13.2px;">"(SELECT GROUP_CONCAT(GD.GROUP_DESCRIPTION) FROM GROUP_MEMBER GM, GROUP_DESC GD WHERE GM.GROUP_ID = GD.GROUP_ID AND GM.GROUP_MEMBER = DB_USER)"</span></span></blockquote>
<span style="color: #666666; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif;"><span style="background-color: white; font-size: 13.2px;"><span style="color: #666666;">Change </span><span style="color: #990000;">"User In Groups"</span><span style="color: #666666;"> above if you want a different column name. Change "</span><span style="color: #990000;">DB_USER</span><span style="color: #666666;">" in the join at the end of the SQL statement in the "expression" field if you'd like to do this with different columns (for example: CLIENT_IP, SOURCE_PROGRAM, etc.). </span></span></span>
<span style="color: #666666; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif;"><span style="background-color: white; font-size: 13.2px;"><br /></span></span><span style="color: #666666; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif;"><span style="background-color: white; font-size: 13.2px;">The new column appears in the query builder under the "Client/Server" entity. You can now use this in any report where "Client/Server" is available. I've found this particularly useful when debugging things like whitelists and logging levels, but there are many other uses as well. You can also do similar things with custom tables as well - not just groups - to add additional context to your reports. Custom computed columns are quite powerful.</span></span><br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiPfSkxHCfeXm30_T42Ycorl0wi8G1UHB0DeQ-Ex9iD4x3IhrlRKzZD4IgaTbTaadwMGtPeN1vgEyi9h9dIH7Tjkpwm3XK-tG63LuLjYHM1HjWYIhKtfkIkWKB2oarBze763xUWRRG4-ghy/s1600/NewColumn.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" height="171" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiPfSkxHCfeXm30_T42Ycorl0wi8G1UHB0DeQ-Ex9iD4x3IhrlRKzZD4IgaTbTaadwMGtPeN1vgEyi9h9dIH7Tjkpwm3XK-tG63LuLjYHM1HjWYIhKtfkIkWKB2oarBze763xUWRRG4-ghy/s400/NewColumn.png" width="400" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">New Column Shown in the Query Builder - The New Columns Always Appear Last in the Lists</td></tr>
</tbody></table>
<span style="color: #666666; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif;"><span style="background-color: white; font-size: 13.2px;"><br /></span></span>
<br />
<span style="color: #666666; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif;"><span style="background-color: white; font-size: 13.2px;"><br /></span></span>Information Insightshttp://www.blogger.com/profile/01560037005312811863noreply@blogger.com1tag:blogger.com,1999:blog-132420452883280664.post-63482761047015785892016-11-15T16:14:00.001-08:002016-11-15T16:25:02.468-08:00An Apparent Guardium V10 GUI Bug that Prevents Configuration of Domain Authentication for MS SQL Server - And It's Workaround<i style="background-color: white; color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13.2px; line-height: 18.48px;">by John Haldeman, Enterprise Architect</i><br />
<span style="background-color: white; color: #666666; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13.2px;"><span style="font-size: 13.2px; line-height: 18.48px;"><br /></span></span>
<span style="background-color: white; color: #666666; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13.2px;"><span style="font-size: 13.2px; line-height: 18.48px;">Today someone on our team ran into an issue with connecting to a MS SQL Server database using a domain authenticated user. It was the second time this happened to us, so I thought I would write a blog post in case someone else encounters it. You might already be familiar with the special considerations for making SQL Server domain authenticated connections in order to set up things like entitlement reports and vulnerability assessments. Specifically, you need the jTDS driver and some special configuration as outlined in this support document:</span></span><br />
<span style="background-color: white; color: #666666; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13.2px;"><span style="font-size: 13.2px; line-height: 18.48px;"> </span></span><span style="color: #666666; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif;"><span style="font-size: 13.2px;"><a href="https://www-01.ibm.com/support/docview.wss?uid=swg21675924">https://www-01.ibm.com/support/docview.wss?uid=swg21675924</a></span></span><br />
<br />
<span style="color: #666666; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif;"><span style="background-color: white; font-size: 13.2px;">The problem is that we've encountered what looks like a bug in Guardium V10's GUI that prevents connection properties from being saved. This is with V10 GPU 125 applied. I think it's likely it affects all current V10 versions, but can't be sure. What that means is that the <i>"domain=<your domain>"</i> instructions listed at the end of the support document don't seem to work. When you test the connection, you'll get failed login errors and when you exit and try and edit the datasource again you might find that the domain parameter that you enter disappears - it looks like it isn't being applied to the datasource definition.</span></span><br />
<span style="color: #666666; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif;"><span style="background-color: white; font-size: 13.2px;"></span></span><br />
<a name='more'></a><span style="color: #666666; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif;"><span style="background-color: white; font-size: 13.2px;"><br /></span></span>
<span style="color: #666666; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif;"><span style="background-color: white;"><span style="font-size: 13.2px;">The workaround for this is to populate the "Custom URL" field in the datasource editor instead and specify the connection properties there. For SQL server domain authenticated connections it would take the following form:</span><br /><span style="font-size: 13.2px;"> jdbc:jtds:sqlserver://<b><host/ip></b>:<b><port></b>;domain=<b><windows_domain></b></span></span></span><br />
<span style="color: #666666; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif;"><span style="background-color: white; font-size: 13.2px;">Replace the items in bold with your host/ip, port, and windows domain name. If you do that you'll likely have more luck. I'll try and update this post if I see this problem gets fixed in a later version of Guardium.</span></span><br />
<span style="color: #666666; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif;"><span style="background-color: white; font-size: 13.2px;"><br /></span></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEisVKWqUObmisQZ9OOzSgThNQcSj3GRBgMHYcMTeh1NZewUPcPh4-xkKtq6gL4otmrcaCW6VWh4UBEcFE6jCUhVVDDgQD6AGTYsCniUJv-ZAedPkXveyynru4IDOyrPwZI1CjLrzSjOcTjv/s1600/domainauth.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEisVKWqUObmisQZ9OOzSgThNQcSj3GRBgMHYcMTeh1NZewUPcPh4-xkKtq6gL4otmrcaCW6VWh4UBEcFE6jCUhVVDDgQD6AGTYsCniUJv-ZAedPkXveyynru4IDOyrPwZI1CjLrzSjOcTjv/s1600/domainauth.png" /></a></div>
<span style="color: #666666; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif;"><span style="background-color: white; font-size: 13.2px;"><br /></span></span>Information Insightshttp://www.blogger.com/profile/01560037005312811863noreply@blogger.com0tag:blogger.com,1999:blog-132420452883280664.post-26373274678943059442016-10-05T15:01:00.000-07:002016-11-15T15:55:09.965-08:00How Do SonarG and Information Insights Solve Common Infrastructure Optimization Issues for your Existing Guardium Deployments?<!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:AllowPNG/>
</o:OfficeDocumentSettings>
</xml><![endif]-->
<!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves/>
<w:TrackFormatting/>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>EN-US</w:LidThemeOther>
<w:LidThemeAsian>JA</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
<w:UseFELayout/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="false"
DefSemiHidden="false" DefQFormat="false" DefPriority="99"
LatentStyleCount="380">
<w:LsdException Locked="false" Priority="0" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 6"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 7"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 8"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 9"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 9"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Normal Indent"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="footnote text"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="annotation text"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="header"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="footer"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index heading"/>
<w:LsdException Locked="false" Priority="35" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="table of figures"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="envelope address"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="envelope return"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="footnote reference"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="annotation reference"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="line number"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="page number"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="endnote reference"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="endnote text"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="table of authorities"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="macro"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="toa heading"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Bullet"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Number"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Bullet 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Bullet 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Bullet 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Bullet 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Number 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Number 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Number 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Number 5"/>
<w:LsdException Locked="false" Priority="10" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Closing"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Signature"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="true"
UnhideWhenUsed="true" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text Indent"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Continue"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Continue 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Continue 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Continue 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Continue 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Message Header"/>
<w:LsdException Locked="false" Priority="11" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Salutation"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Date"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text First Indent"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text First Indent 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Heading"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text Indent 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text Indent 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Block Text"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Hyperlink"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="FollowedHyperlink"/>
<w:LsdException Locked="false" Priority="22" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Document Map"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Plain Text"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="E-mail Signature"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Top of Form"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Bottom of Form"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Normal (Web)"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Acronym"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Address"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Cite"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Code"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Definition"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Keyboard"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Preformatted"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Sample"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Typewriter"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Variable"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Normal Table"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="annotation subject"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="No List"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Outline List 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Outline List 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Outline List 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Simple 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Simple 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Simple 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Classic 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Classic 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Classic 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Classic 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Colorful 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Colorful 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Colorful 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Columns 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Columns 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Columns 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Columns 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Columns 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 6"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 7"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 8"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 6"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 7"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 8"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table 3D effects 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table 3D effects 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table 3D effects 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Contemporary"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Elegant"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Professional"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Subtle 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Subtle 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Web 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Web 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Web 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Balloon Text"/>
<w:LsdException Locked="false" Priority="39" Name="Table Grid"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Theme"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 6"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 7"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 8"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 9"/>
<w:LsdException Locked="false" SemiHidden="true" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" SemiHidden="true" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" QFormat="true"
Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" QFormat="true"
Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" QFormat="true"
Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" QFormat="true"
Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" QFormat="true"
Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" QFormat="true"
Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" SemiHidden="true"
UnhideWhenUsed="true" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="TOC Heading"/>
<w:LsdException Locked="false" Priority="41" Name="Plain Table 1"/>
<w:LsdException Locked="false" Priority="42" Name="Plain Table 2"/>
<w:LsdException Locked="false" Priority="43" Name="Plain Table 3"/>
<w:LsdException Locked="false" Priority="44" Name="Plain Table 4"/>
<w:LsdException Locked="false" Priority="45" Name="Plain Table 5"/>
<w:LsdException Locked="false" Priority="40" Name="Grid Table Light"/>
<w:LsdException Locked="false" Priority="46" Name="Grid Table 1 Light"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark"/>
<w:LsdException Locked="false" Priority="51" Name="Grid Table 6 Colorful"/>
<w:LsdException Locked="false" Priority="52" Name="Grid Table 7 Colorful"/>
<w:LsdException Locked="false" Priority="46"
Name="Grid Table 1 Light Accent 1"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2 Accent 1"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3 Accent 1"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4 Accent 1"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark Accent 1"/>
<w:LsdException Locked="false" Priority="51"
Name="Grid Table 6 Colorful Accent 1"/>
<w:LsdException Locked="false" Priority="52"
Name="Grid Table 7 Colorful Accent 1"/>
<w:LsdException Locked="false" Priority="46"
Name="Grid Table 1 Light Accent 2"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2 Accent 2"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3 Accent 2"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4 Accent 2"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark Accent 2"/>
<w:LsdException Locked="false" Priority="51"
Name="Grid Table 6 Colorful Accent 2"/>
<w:LsdException Locked="false" Priority="52"
Name="Grid Table 7 Colorful Accent 2"/>
<w:LsdException Locked="false" Priority="46"
Name="Grid Table 1 Light Accent 3"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2 Accent 3"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3 Accent 3"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4 Accent 3"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark Accent 3"/>
<w:LsdException Locked="false" Priority="51"
Name="Grid Table 6 Colorful Accent 3"/>
<w:LsdException Locked="false" Priority="52"
Name="Grid Table 7 Colorful Accent 3"/>
<w:LsdException Locked="false" Priority="46"
Name="Grid Table 1 Light Accent 4"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2 Accent 4"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3 Accent 4"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4 Accent 4"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark Accent 4"/>
<w:LsdException Locked="false" Priority="51"
Name="Grid Table 6 Colorful Accent 4"/>
<w:LsdException Locked="false" Priority="52"
Name="Grid Table 7 Colorful Accent 4"/>
<w:LsdException Locked="false" Priority="46"
Name="Grid Table 1 Light Accent 5"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2 Accent 5"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3 Accent 5"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4 Accent 5"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark Accent 5"/>
<w:LsdException Locked="false" Priority="51"
Name="Grid Table 6 Colorful Accent 5"/>
<w:LsdException Locked="false" Priority="52"
Name="Grid Table 7 Colorful Accent 5"/>
<w:LsdException Locked="false" Priority="46"
Name="Grid Table 1 Light Accent 6"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2 Accent 6"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3 Accent 6"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4 Accent 6"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark Accent 6"/>
<w:LsdException Locked="false" Priority="51"
Name="Grid Table 6 Colorful Accent 6"/>
<w:LsdException Locked="false" Priority="52"
Name="Grid Table 7 Colorful Accent 6"/>
<w:LsdException Locked="false" Priority="46" Name="List Table 1 Light"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark"/>
<w:LsdException Locked="false" Priority="51" Name="List Table 6 Colorful"/>
<w:LsdException Locked="false" Priority="52" Name="List Table 7 Colorful"/>
<w:LsdException Locked="false" Priority="46"
Name="List Table 1 Light Accent 1"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2 Accent 1"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3 Accent 1"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4 Accent 1"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark Accent 1"/>
<w:LsdException Locked="false" Priority="51"
Name="List Table 6 Colorful Accent 1"/>
<w:LsdException Locked="false" Priority="52"
Name="List Table 7 Colorful Accent 1"/>
<w:LsdException Locked="false" Priority="46"
Name="List Table 1 Light Accent 2"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2 Accent 2"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3 Accent 2"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4 Accent 2"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark Accent 2"/>
<w:LsdException Locked="false" Priority="51"
Name="List Table 6 Colorful Accent 2"/>
<w:LsdException Locked="false" Priority="52"
Name="List Table 7 Colorful Accent 2"/>
<w:LsdException Locked="false" Priority="46"
Name="List Table 1 Light Accent 3"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2 Accent 3"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3 Accent 3"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4 Accent 3"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark Accent 3"/>
<w:LsdException Locked="false" Priority="51"
Name="List Table 6 Colorful Accent 3"/>
<w:LsdException Locked="false" Priority="52"
Name="List Table 7 Colorful Accent 3"/>
<w:LsdException Locked="false" Priority="46"
Name="List Table 1 Light Accent 4"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2 Accent 4"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3 Accent 4"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4 Accent 4"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark Accent 4"/>
<w:LsdException Locked="false" Priority="51"
Name="List Table 6 Colorful Accent 4"/>
<w:LsdException Locked="false" Priority="52"
Name="List Table 7 Colorful Accent 4"/>
<w:LsdException Locked="false" Priority="46"
Name="List Table 1 Light Accent 5"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2 Accent 5"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3 Accent 5"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4 Accent 5"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark Accent 5"/>
<w:LsdException Locked="false" Priority="51"
Name="List Table 6 Colorful Accent 5"/>
<w:LsdException Locked="false" Priority="52"
Name="List Table 7 Colorful Accent 5"/>
<w:LsdException Locked="false" Priority="46"
Name="List Table 1 Light Accent 6"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2 Accent 6"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3 Accent 6"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4 Accent 6"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark Accent 6"/>
<w:LsdException Locked="false" Priority="51"
Name="List Table 6 Colorful Accent 6"/>
<w:LsdException Locked="false" Priority="52"
Name="List Table 7 Colorful Accent 6"/>
</w:LatentStyles>
</xml><![endif]-->
<!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin:0in;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:Cambria;
mso-ascii-font-family:Cambria;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Cambria;
mso-hansi-theme-font:minor-latin;}
</style>
<![endif]-->
<!--StartFragment--><b><span style="font-family: "century gothic"; font-size: 11.0pt;">Partnering
for Even More Secure <u>Enterprise Data Infrastructure</u></span></b><br />
<b><span style="font-family: "century gothic"; font-size: 11.0pt;"><u><br /></u></span></b>
<br />
<div class="MsoNormal" style="line-height: 115%;">
<span style="font-family: "century gothic"; font-size: 11.0pt; line-height: 115%;">Earlier
this year, </span><a href="http://infoinsightsllc.com/"><span style="font-family: "century gothic"; font-size: 11.0pt; line-height: 115%;">Information
Insights</span></a><span style="font-family: "century gothic"; font-size: 11.0pt; line-height: 115%;"> announced a partnership with
jSonar, enhancing <u>data security</u> capabilities with the SonarG solution for
further optimizing Guardium environments. Led by Ron Ben Natan, former
CTO/founder of Guardium, this additional layer of protection takes advantage of
next-generation Big Data technology to enhance and expand the platform’s resources
in a number of key areas. <o:p></o:p></span></div>
<div class="MsoNormal" style="line-height: 115%;">
<br /></div>
<div class="MsoNormal" style="line-height: 115%;">
<span style="font-family: "century gothic"; font-size: 11.0pt; line-height: 115%;">Since
that announcement, I’ve met with many of jSonar’s Guardium clients to discuss
SonarG, receiving feedback on our approach, along with insight into current challenges
and goals for expanding the functionality and value that they get from Guardium.<span style="mso-spacerun: yes;"> </span><o:p></o:p></span></div>
<div class="MsoNormal" style="line-height: 115%;">
<br /></div>
<div class="MsoNormal" style="line-height: 115%;">
<span style="font-family: "century gothic"; font-size: 11.0pt; line-height: 115%;">We
were quickly able to pinpoint the source of SonarG’s enthusiastic adoption - it
provides a powerful set of capabilities that perfectly complement the
challenges and goals that the majority of Guardium deployments are facing. <o:p></o:p></span></div>
<div class="MsoNormal" style="line-height: 115%;">
<br /></div>
<div class="MsoNormal" style="line-height: 115%;">
<span style="font-family: "century gothic"; font-size: 11.0pt; line-height: 115%;">Over
the next few weeks, we will outline the findings from these conversations to
address common concerns from customers, along with insight into how these are
solved via SonarG – focusing on three major areas of enterprise data
management: infrastructure optimization, improving data access and enabling
security analytics. <o:p></o:p></span></div>
<div class="MsoNormal" style="line-height: 115%;">
<b style="mso-bidi-font-weight: normal;"><span style="font-family: "century gothic"; font-size: 11.0pt; line-height: 115%;"></span></b><br />
<a name='more'></a><b style="mso-bidi-font-weight: normal;"><span style="font-family: "century gothic"; font-size: 11.0pt; line-height: 115%;"><br />
Challenge One: Secure Infrastructure Optimization <o:p></o:p></span></b></div>
<div class="MsoNormal" style="line-height: 115%;">
<span style="font-family: "century gothic"; font-size: 11.0pt; line-height: 115%;">The
majority of clients that I spoke with are continuing to expand their Guardium
footprint, driven by increasing database counts and a need to open up their
policies to capture and monitor more sensitive data.<span style="mso-spacerun: yes;"> </span>Knowing that this growth directly translates
into increased infrastructure and operational costs, they are looking for complementary
technology that would allow them to minimize the “care and feeding” overhead of
Guardium while also reducing costs.<span style="mso-spacerun: yes;"> </span>The
overwhelming message was How can we….?<o:p></o:p></span></div>
<div class="MsoNormal" style="line-height: 115%;">
<br /></div>
<div class="MsoListParagraphCxSpFirst" style="mso-list: l0 level1 lfo2; text-indent: -.25in;">
<!--[if !supportLists]--><span style="font-family: "symbol"; font-size: 11.0pt;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";"> </span></span></span><!--[endif]--><span style="font-family: "century gothic"; font-size: 11.0pt;">…reduce infrastructure
and storage costs while collecting more data?</span><span style="font-size: 11.0pt;"><o:p></o:p></span></div>
<div class="MsoListParagraphCxSpMiddle" style="mso-list: l0 level1 lfo2; text-indent: -.25in;">
<!--[if !supportLists]--><span style="font-family: "symbol"; font-size: 11.0pt;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";"> </span></span></span><!--[endif]--><span style="font-family: "century gothic"; font-size: 11.0pt;">…simplify the collection
architecture to enable better use of the data?<o:p></o:p></span></div>
<div class="MsoListParagraphCxSpMiddle" style="line-height: 115%; mso-list: l0 level1 lfo2; text-indent: -.25in;">
<!--[if !supportLists]--><span style="font-family: "symbol"; font-size: 11.0pt; line-height: 115%;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";">
</span></span></span><!--[endif]--><span style="font-family: "century gothic"; font-size: 11.0pt; line-height: 115%;">…kill aggregators and their processes, latency,
instability, etc?<o:p></o:p></span></div>
<div class="MsoListParagraphCxSpLast" style="line-height: 115%; mso-list: l0 level1 lfo2; text-indent: -.25in;">
<!--[if !supportLists]--><span style="font-family: "symbol"; font-size: 11.0pt; line-height: 115%;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";"> </span></span></span><!--[endif]--><span style="font-family: "century gothic"; font-size: 11.0pt; line-height: 115%;">…increase
retention periods from 15-45 days to a year or more?</span><span style="font-family: "century gothic"; font-size: 11.0pt; line-height: 115%;"><o:p></o:p></span></div>
<div class="MsoNormal" style="line-height: 115%;">
<br /></div>
<div class="MsoNormal" style="line-height: 115%;">
<span style="font-family: "century gothic"; font-size: 11.0pt; line-height: 115%;">We
designed the SonarG architecture to simplify Guardium architecture and help
customers <b style="mso-bidi-font-weight: normal;">focus more on the data output</b>
and less on the challenges of collecting and managing what is often many TBs of
activity data distributed across many appliances. <o:p></o:p></span></div>
<div class="MsoNormal" style="line-height: 115%;">
<br /></div>
<div class="MsoNormal" style="line-height: 115%;">
<span style="font-family: "century gothic"; font-size: 11.0pt; line-height: 115%;">Looking
at the architectural diagram, a key change is clear: <b style="mso-bidi-font-weight: normal;">Aggregators are eliminated. </b>All Collectors send their data to a
common SonarG warehouse, which is typically a single commodity server or instance
optimized for low cost, large storage and high performance queries. <b style="mso-bidi-font-weight: normal;"><o:p></o:p></b></span></div>
<div class="MsoNormal" style="line-height: 115%;">
<br /></div>
<div class="MsoNormal" style="line-height: 115%;">
<span style="font-family: "century gothic"; font-size: 11.0pt; line-height: 115%;">Nothing
changes on the STAP, Collector and Central Manager fronts, other than enabling
the collectors to push data to the warehouse using an extraction method that
was jointly developed with IBM using data mart technology. With the right patch
level and a couple of simple scripts, data extraction is up and running. You
can even test this in parallel with your aggregators, since the SonarG system
can run concurrently. <o:p></o:p></span></div>
<div class="MsoNormal" style="line-height: 115%;">
<br /></div>
<div class="MsoNormal" style="line-height: 115%;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitn5gzFpfyVJK1Snlk-dGN8sD_4aSb_Ioy0ps44yk_Rz2rOzoKhyPPFb8JTKb8anb0ybwCzldZ_N3iKSDUCNCXtG1hbdwhJR0mpfct2GDPSC1lvqeKUnQjVfKOLdjq5Sftsc-mQU-z7gdW/s1600/SonarG+Image.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="185" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitn5gzFpfyVJK1Snlk-dGN8sD_4aSb_Ioy0ps44yk_Rz2rOzoKhyPPFb8JTKb8anb0ybwCzldZ_N3iKSDUCNCXtG1hbdwhJR0mpfct2GDPSC1lvqeKUnQjVfKOLdjq5Sftsc-mQU-z7gdW/s400/SonarG+Image.png" width="400" /></a></div>
<br />
<div class="MsoNormal" style="line-height: 115%;">
<br /></div>
<div class="MsoNormal" style="line-height: 115%;">
<br /></div>
<div class="MsoNormal" style="line-height: 115%;">
<b style="mso-bidi-font-weight: normal;"><span style="font-family: "century gothic"; font-size: 11.0pt; line-height: 115%;">With the SonarG approach, you can embrace
broader policies and collect much more data without fear of negatively
impacting their Guardium environment. <o:p></o:p></span></b></div>
<div class="MsoNormal" style="line-height: 115%;">
<br /></div>
<div class="MsoNormal" style="line-height: 115%;">
<span style="font-family: "century gothic"; font-size: 11.0pt; line-height: 115%;">This simple
change in architecture provides a number of key benefits that tie directly into
the challenges highlighted earlier:<o:p></o:p></span></div>
<div class="MsoNormal" style="line-height: 115%;">
<br /></div>
<div class="MsoListParagraphCxSpFirst" style="line-height: 115%; margin-left: .75in; mso-add-space: auto; mso-list: l1 level1 lfo1; text-indent: -.25in;">
<!--[if !supportLists]--><span style="font-size: 11.0pt; line-height: 115%; mso-ascii-font-family: Cambria; mso-bidi-font-family: Cambria; mso-bidi-font-size: 12.0pt; mso-fareast-font-family: Cambria; mso-hansi-font-family: Cambria;"><span style="mso-list: Ignore;">-<span style="font: 7.0pt "Times New Roman";"> </span></span></span><!--[endif]--><span style="font-family: "century gothic"; font-size: 11.0pt; line-height: 115%;">We’ve eliminated Aggregators completely while consolidating
data into a central data warehouse and cost effectively extending retention
periods <o:p></o:p></span></div>
<div class="MsoListParagraphCxSpMiddle" style="line-height: 115%; margin-left: .75in; mso-add-space: auto;">
<br /></div>
<div class="MsoListParagraphCxSpMiddle" style="line-height: 115%; margin-left: .75in; mso-add-space: auto; mso-list: l1 level1 lfo1; text-indent: -.25in;">
<!--[if !supportLists]--><span style="font-size: 11.0pt; line-height: 115%; mso-ascii-font-family: Cambria; mso-bidi-font-family: Cambria; mso-bidi-font-size: 12.0pt; mso-fareast-font-family: Cambria; mso-hansi-font-family: Cambria;"><span style="mso-list: Ignore;">-<span style="font: 7.0pt "Times New Roman";"> </span></span></span><!--[endif]--><span style="font-family: "century gothic"; font-size: 11.0pt; line-height: 115%;">We’ve reduce Collector storage from 600GB to 60GB and
eliminated the challenge of managing long term data on the collectors<o:p></o:p></span></div>
<div class="MsoListParagraphCxSpMiddle" style="line-height: 115%; margin-left: .75in; mso-add-space: auto;">
<br /></div>
<div class="MsoListParagraphCxSpLast" style="line-height: 115%; margin-left: .75in; mso-add-space: auto; mso-list: l1 level1 lfo1; text-indent: -.25in;">
<!--[if !supportLists]--><span style="font-size: 11.0pt; line-height: 115%; mso-ascii-font-family: Cambria; mso-bidi-font-family: Cambria; mso-bidi-font-size: 12.0pt; mso-fareast-font-family: Cambria; mso-hansi-font-family: Cambria;"><span style="mso-list: Ignore;">-<span style="font: 7.0pt "Times New Roman";"> </span></span></span><!--[endif]--><span style="font-family: "century gothic"; font-size: 11.0pt; line-height: 115%;">We’ve reduce collection latency from 24 hours to 1 hour<o:p></o:p></span></div>
<div class="MsoNormal" style="line-height: 115%;">
<br /></div>
<div class="MsoListParagraph" style="line-height: 115%; margin-left: .75in; mso-add-space: auto; mso-list: l1 level1 lfo1; text-indent: -.25in;">
<!--[if !supportLists]--><span style="font-size: 11.0pt; line-height: 115%; mso-ascii-font-family: Cambria; mso-bidi-font-family: Cambria; mso-bidi-font-size: 12.0pt; mso-fareast-font-family: Cambria; mso-hansi-font-family: Cambria;"><span style="mso-list: Ignore;">-<span style="font: 7.0pt "Times New Roman";"> </span></span></span><!--[endif]--><span style="font-family: "century gothic"; font-size: 11.0pt; line-height: 115%;">We’ve increase collector throughput by 10-20%<o:p></o:p></span></div>
<div class="MsoNormal" style="line-height: 115%;">
<br /></div>
<div class="MsoNormal" style="line-height: 115%;">
<br /></div>
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]--><!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:AllowPNG/>
</o:OfficeDocumentSettings>
</xml><![endif]-->
<!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves>false</w:TrackMoves>
<w:TrackFormatting/>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>EN-US</w:LidThemeOther>
<w:LidThemeAsian>JA</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
<w:UseFELayout/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="false"
DefSemiHidden="false" DefQFormat="false" DefPriority="99"
LatentStyleCount="380">
<w:LsdException Locked="false" Priority="0" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 6"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 7"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 8"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 9"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 9"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Normal Indent"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="footnote text"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="annotation text"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="header"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="footer"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index heading"/>
<w:LsdException Locked="false" Priority="35" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="table of figures"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="envelope address"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="envelope return"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="footnote reference"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="annotation reference"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="line number"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="page number"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="endnote reference"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="endnote text"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="table of authorities"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="macro"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="toa heading"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Bullet"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Number"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Bullet 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Bullet 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Bullet 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Bullet 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Number 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Number 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Number 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Number 5"/>
<w:LsdException Locked="false" Priority="10" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Closing"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Signature"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="true"
UnhideWhenUsed="true" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text Indent"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Continue"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Continue 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Continue 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Continue 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Continue 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Message Header"/>
<w:LsdException Locked="false" Priority="11" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Salutation"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Date"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text First Indent"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text First Indent 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Heading"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text Indent 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text Indent 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Block Text"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Hyperlink"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="FollowedHyperlink"/>
<w:LsdException Locked="false" Priority="22" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Document Map"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Plain Text"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="E-mail Signature"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Top of Form"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Bottom of Form"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Normal (Web)"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Acronym"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Address"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Cite"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Code"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Definition"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Keyboard"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Preformatted"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Sample"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Typewriter"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Variable"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Normal Table"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="annotation subject"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="No List"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Outline List 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Outline List 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Outline List 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Simple 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Simple 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Simple 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Classic 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Classic 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Classic 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Classic 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Colorful 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Colorful 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Colorful 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Columns 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Columns 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Columns 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Columns 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Columns 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 6"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 7"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 8"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 6"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 7"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 8"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table 3D effects 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table 3D effects 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table 3D effects 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Contemporary"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Elegant"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Professional"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Subtle 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Subtle 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Web 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Web 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Web 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Balloon Text"/>
<w:LsdException Locked="false" Priority="39" Name="Table Grid"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Theme"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 6"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 7"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 8"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 9"/>
<w:LsdException Locked="false" SemiHidden="true" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" SemiHidden="true" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" QFormat="true"
Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" QFormat="true"
Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" QFormat="true"
Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" QFormat="true"
Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" QFormat="true"
Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" QFormat="true"
Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" SemiHidden="true"
UnhideWhenUsed="true" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="TOC Heading"/>
<w:LsdException Locked="false" Priority="41" Name="Plain Table 1"/>
<w:LsdException Locked="false" Priority="42" Name="Plain Table 2"/>
<w:LsdException Locked="false" Priority="43" Name="Plain Table 3"/>
<w:LsdException Locked="false" Priority="44" Name="Plain Table 4"/>
<w:LsdException Locked="false" Priority="45" Name="Plain Table 5"/>
<w:LsdException Locked="false" Priority="40" Name="Grid Table Light"/>
<w:LsdException Locked="false" Priority="46" Name="Grid Table 1 Light"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark"/>
<w:LsdException Locked="false" Priority="51" Name="Grid Table 6 Colorful"/>
<w:LsdException Locked="false" Priority="52" Name="Grid Table 7 Colorful"/>
<w:LsdException Locked="false" Priority="46"
Name="Grid Table 1 Light Accent 1"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2 Accent 1"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3 Accent 1"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4 Accent 1"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark Accent 1"/>
<w:LsdException Locked="false" Priority="51"
Name="Grid Table 6 Colorful Accent 1"/>
<w:LsdException Locked="false" Priority="52"
Name="Grid Table 7 Colorful Accent 1"/>
<w:LsdException Locked="false" Priority="46"
Name="Grid Table 1 Light Accent 2"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2 Accent 2"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3 Accent 2"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4 Accent 2"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark Accent 2"/>
<w:LsdException Locked="false" Priority="51"
Name="Grid Table 6 Colorful Accent 2"/>
<w:LsdException Locked="false" Priority="52"
Name="Grid Table 7 Colorful Accent 2"/>
<w:LsdException Locked="false" Priority="46"
Name="Grid Table 1 Light Accent 3"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2 Accent 3"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3 Accent 3"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4 Accent 3"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark Accent 3"/>
<w:LsdException Locked="false" Priority="51"
Name="Grid Table 6 Colorful Accent 3"/>
<w:LsdException Locked="false" Priority="52"
Name="Grid Table 7 Colorful Accent 3"/>
<w:LsdException Locked="false" Priority="46"
Name="Grid Table 1 Light Accent 4"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2 Accent 4"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3 Accent 4"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4 Accent 4"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark Accent 4"/>
<w:LsdException Locked="false" Priority="51"
Name="Grid Table 6 Colorful Accent 4"/>
<w:LsdException Locked="false" Priority="52"
Name="Grid Table 7 Colorful Accent 4"/>
<w:LsdException Locked="false" Priority="46"
Name="Grid Table 1 Light Accent 5"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2 Accent 5"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3 Accent 5"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4 Accent 5"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark Accent 5"/>
<w:LsdException Locked="false" Priority="51"
Name="Grid Table 6 Colorful Accent 5"/>
<w:LsdException Locked="false" Priority="52"
Name="Grid Table 7 Colorful Accent 5"/>
<w:LsdException Locked="false" Priority="46"
Name="Grid Table 1 Light Accent 6"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2 Accent 6"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3 Accent 6"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4 Accent 6"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark Accent 6"/>
<w:LsdException Locked="false" Priority="51"
Name="Grid Table 6 Colorful Accent 6"/>
<w:LsdException Locked="false" Priority="52"
Name="Grid Table 7 Colorful Accent 6"/>
<w:LsdException Locked="false" Priority="46" Name="List Table 1 Light"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark"/>
<w:LsdException Locked="false" Priority="51" Name="List Table 6 Colorful"/>
<w:LsdException Locked="false" Priority="52" Name="List Table 7 Colorful"/>
<w:LsdException Locked="false" Priority="46"
Name="List Table 1 Light Accent 1"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2 Accent 1"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3 Accent 1"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4 Accent 1"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark Accent 1"/>
<w:LsdException Locked="false" Priority="51"
Name="List Table 6 Colorful Accent 1"/>
<w:LsdException Locked="false" Priority="52"
Name="List Table 7 Colorful Accent 1"/>
<w:LsdException Locked="false" Priority="46"
Name="List Table 1 Light Accent 2"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2 Accent 2"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3 Accent 2"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4 Accent 2"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark Accent 2"/>
<w:LsdException Locked="false" Priority="51"
Name="List Table 6 Colorful Accent 2"/>
<w:LsdException Locked="false" Priority="52"
Name="List Table 7 Colorful Accent 2"/>
<w:LsdException Locked="false" Priority="46"
Name="List Table 1 Light Accent 3"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2 Accent 3"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3 Accent 3"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4 Accent 3"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark Accent 3"/>
<w:LsdException Locked="false" Priority="51"
Name="List Table 6 Colorful Accent 3"/>
<w:LsdException Locked="false" Priority="52"
Name="List Table 7 Colorful Accent 3"/>
<w:LsdException Locked="false" Priority="46"
Name="List Table 1 Light Accent 4"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2 Accent 4"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3 Accent 4"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4 Accent 4"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark Accent 4"/>
<w:LsdException Locked="false" Priority="51"
Name="List Table 6 Colorful Accent 4"/>
<w:LsdException Locked="false" Priority="52"
Name="List Table 7 Colorful Accent 4"/>
<w:LsdException Locked="false" Priority="46"
Name="List Table 1 Light Accent 5"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2 Accent 5"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3 Accent 5"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4 Accent 5"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark Accent 5"/>
<w:LsdException Locked="false" Priority="51"
Name="List Table 6 Colorful Accent 5"/>
<w:LsdException Locked="false" Priority="52"
Name="List Table 7 Colorful Accent 5"/>
<w:LsdException Locked="false" Priority="46"
Name="List Table 1 Light Accent 6"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2 Accent 6"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3 Accent 6"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4 Accent 6"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark Accent 6"/>
<w:LsdException Locked="false" Priority="51"
Name="List Table 6 Colorful Accent 6"/>
<w:LsdException Locked="false" Priority="52"
Name="List Table 7 Colorful Accent 6"/>
</w:LatentStyles>
</xml><![endif]-->
<!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin:0in;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:Cambria;
mso-ascii-font-family:Cambria;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Cambria;
mso-hansi-theme-font:minor-latin;}
</style>
<![endif]-->
<!--StartFragment-->
<!--EndFragment--><br />
<div class="MsoNormal" style="line-height: 115%;">
<span style="font-family: "century gothic"; font-size: 11.0pt; line-height: 115%;">The
next blog in the series will look into how <a href="http://www.jsonar.com/#sonarg">SonarG</a> can greatly improve access to
increasingly large volumes of data, securely, across teams. Think self-service
reporting and hundreds of different tools that your team can use to securely
access relevant data.</span></div>
<div class="MsoNormal" style="line-height: 115%;">
<span style="font-family: "century gothic"; font-size: 11.0pt; line-height: 115%;"><br /></span></div>
<div class="MsoNormal" style="line-height: 115%;">
<span style="font-family: "century gothic"; font-size: 11.0pt; line-height: 115%;">Guest Author: <a href="https://www.linkedin.com/in/chrisbrown27">Chris Brown</a>, jSonar<o:p></o:p></span></div>
Information Insightshttp://www.blogger.com/profile/01560037005312811863noreply@blogger.com0tag:blogger.com,1999:blog-132420452883280664.post-8476050369650189032016-08-01T07:50:00.000-07:002016-08-01T07:50:56.059-07:00Information Insights Expands Data Security Capabilities<div class="MsoNormal">
<span style="font-family: Arial, Helvetica, sans-serif;"><span style="color: black; font-size: 9.0pt;"><br />
</span><b style="mso-bidi-font-weight: normal;"><span style="color: black; font-size: 10.0pt;"><span style="mso-tab-count: 4;"> </span><br />
</span></b><span style="font-family: "Century Gothic"; mso-bidi-font-family: "Times New Roman"; mso-fareast-font-family: "Times New Roman";"><br />
</span><b style="mso-bidi-font-weight: normal;"><span style="color: black; font-size: 10pt;"><span style="font-family: inherit;">Information
Insights Expands Data Security Capabilities with BTRG Practice Group
Acquisition</span></span></b></span></div>
<div class="MsoNormal">
<span style="font-family: Arial, Helvetica, sans-serif;"><b style="mso-bidi-font-weight: normal;"><span style="color: black; font-size: 10pt;"><br />
</span></b><span style="background: white; color: black; font-size: 10pt;">Through the recent acquisition of the Data
Security/ Governance Practice of The Business & Technology Resource
Group (BTRG)</span><i style="mso-bidi-font-style: normal;"><span style="color: black; font-size: 10pt;">), Information Insights strengthens the delivery capacity and competency
of their Nationally-Recognized Data Security Practice. <o:p></o:p></span></i></span></div>
<div class="MsoNormal">
<span style="font-family: Arial, Helvetica, sans-serif;"><br /></span></div>
<div class="MsoNormal">
<span style="color: black; font-size: 10pt;"><span style="font-family: Arial, Helvetica, sans-serif;">August 1, 2016 (Atlanta, GA) – Information
Insights, LLC, an IBM Premier Business Partner, is pleased to announce their recent
acquisition of BTRG’s Information Governance Practice. BTRG is a leading
industry partner, known for providing comprehensive security strategies and
data masking.<o:p></o:p></span></span></div>
<div class="MsoNormal">
<span style="font-family: Arial, Helvetica, sans-serif;"><br /></span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: Arial, Helvetica, sans-serif;"><span style="color: black; font-size: 10pt;">“The addition of BTRG’s proven Data Security
and Information Governance team to our group expands our ability to deliver data
security solutions to an expanding client base, in a time when data security is
a critical issue for all enterprises. At the same time, the complementary
nature of the teams allows Information Insights to maintain a tight focus on
delivering excellence in our core competencies and enhances our Guardium
Managed Services capability,” </span><span style="color: black; font-size: 10pt;">said
Bill Crawford, Information Insights’ President. “Additional Data Security
capabilities let us be very responsive to our clients and our partners. Adding
the BTRG team allows us to quickly bring talented resources to bear on time
sensitive initiatives, like securing enterprise data assets.”<o:p></o:p></span></span></div>
<div class="MsoNormal">
<span style="font-family: Arial, Helvetica, sans-serif;"><br /></span></div>
<div class="MsoNormal" style="margin-bottom: 12.0pt; mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="color: black; font-size: 10pt;"><span style="font-family: Arial, Helvetica, sans-serif;">Information Insights helps clients improve
their security posture through robust data security, privacy and encryption
strategies and solutions. By joining BTRG with their team, Information Insights
increases the delivery capacity and tools at their disposal to help clients
advance their data security programs, while at the same time addressing key
business challenges around privacy, compliance and scalability.<o:p></o:p></span></span></div>
<div class="MsoNormal" style="margin-bottom: 12.0pt; mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: Arial, Helvetica, sans-serif;"><span style="color: black; font-size: 10pt;">To learn more about how Information Insights
safeguards enterprise data through activity monitoring, encryption and masking
of critical IT assets, visit them online at </span><a href="http://www.infoinsightsllc.com/"><span style="font-size: 10pt;">www.infoinsightsllc.com</span></a><span style="color: black; font-size: 10pt;">. <o:p></o:p></span></span></div>
<div style="background: white; line-height: 115%; margin-bottom: .0001pt; margin: 0in;">
<span style="font-family: Arial, Helvetica, sans-serif;"><span style="color: black; font-size: 10.0pt; line-height: 115%;"><span style="font-family: inherit;">____________________________________________________________________________<br />
<b style="mso-bidi-font-weight: normal;">About Information Insights</b><br />
</span></span><span style="color: black; font-size: 10.0pt; line-height: 115%;"><span style="font-family: inherit;">Information Insights, LLC, North America’s only Gold Accredited Guardium
Partner, is a software solutions provider focused on helping companies improve enterprise
data management. With domain expertise in the areas of data security, data
privacy and data lifecycle management, Information Insights has the skills and
experience required to help clients drive cost reduction and risk mitigation in
their enterprise application portfolios.</span><o:p></o:p></span></span></div>
<!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:RelyOnVML/>
<o:AllowPNG/>
</o:OfficeDocumentSettings>
</xml><![endif]-->
<!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves/>
<w:TrackFormatting/>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>EN-US</w:LidThemeOther>
<w:LidThemeAsian>JA</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="false"
DefSemiHidden="false" DefQFormat="false" DefPriority="99"
LatentStyleCount="380">
<w:LsdException Locked="false" Priority="0" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 6"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 7"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 8"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 9"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 9"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Normal Indent"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="footnote text"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="annotation text"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="header"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="footer"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index heading"/>
<w:LsdException Locked="false" Priority="35" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="table of figures"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="envelope address"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="envelope return"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="footnote reference"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="annotation reference"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="line number"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="page number"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="endnote reference"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="endnote text"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="table of authorities"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="macro"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="toa heading"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Bullet"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Number"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Bullet 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Bullet 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Bullet 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Bullet 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Number 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Number 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Number 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Number 5"/>
<w:LsdException Locked="false" Priority="10" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Closing"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Signature"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="true"
UnhideWhenUsed="true" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text Indent"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Continue"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Continue 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Continue 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Continue 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Continue 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Message Header"/>
<w:LsdException Locked="false" Priority="11" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Salutation"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Date"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text First Indent"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text First Indent 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Heading"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text Indent 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text Indent 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Block Text"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Hyperlink"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="FollowedHyperlink"/>
<w:LsdException Locked="false" Priority="22" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Document Map"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Plain Text"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="E-mail Signature"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Top of Form"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Bottom of Form"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Normal (Web)"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Acronym"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Address"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Cite"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Code"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Definition"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Keyboard"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Preformatted"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Sample"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Typewriter"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Variable"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Normal Table"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="annotation subject"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="No List"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Outline List 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Outline List 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Outline List 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Simple 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Simple 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Simple 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Classic 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Classic 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Classic 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Classic 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Colorful 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Colorful 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Colorful 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Columns 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Columns 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Columns 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Columns 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Columns 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 6"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 7"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 8"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 6"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 7"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 8"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table 3D effects 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table 3D effects 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table 3D effects 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Contemporary"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Elegant"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Professional"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Subtle 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Subtle 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Web 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Web 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Web 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Balloon Text"/>
<w:LsdException Locked="false" Priority="39" Name="Table Grid"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Theme"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 6"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 7"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 8"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Level 9"/>
<w:LsdException Locked="false" SemiHidden="true" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" SemiHidden="true" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" QFormat="true"
Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" QFormat="true"
Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" QFormat="true"
Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" QFormat="true"
Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" QFormat="true"
Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" QFormat="true"
Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" SemiHidden="true"
UnhideWhenUsed="true" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="TOC Heading"/>
<w:LsdException Locked="false" Priority="41" Name="Plain Table 1"/>
<w:LsdException Locked="false" Priority="42" Name="Plain Table 2"/>
<w:LsdException Locked="false" Priority="43" Name="Plain Table 3"/>
<w:LsdException Locked="false" Priority="44" Name="Plain Table 4"/>
<w:LsdException Locked="false" Priority="45" Name="Plain Table 5"/>
<w:LsdException Locked="false" Priority="40" Name="Grid Table Light"/>
<w:LsdException Locked="false" Priority="46" Name="Grid Table 1 Light"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark"/>
<w:LsdException Locked="false" Priority="51" Name="Grid Table 6 Colorful"/>
<w:LsdException Locked="false" Priority="52" Name="Grid Table 7 Colorful"/>
<w:LsdException Locked="false" Priority="46"
Name="Grid Table 1 Light Accent 1"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2 Accent 1"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3 Accent 1"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4 Accent 1"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark Accent 1"/>
<w:LsdException Locked="false" Priority="51"
Name="Grid Table 6 Colorful Accent 1"/>
<w:LsdException Locked="false" Priority="52"
Name="Grid Table 7 Colorful Accent 1"/>
<w:LsdException Locked="false" Priority="46"
Name="Grid Table 1 Light Accent 2"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2 Accent 2"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3 Accent 2"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4 Accent 2"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark Accent 2"/>
<w:LsdException Locked="false" Priority="51"
Name="Grid Table 6 Colorful Accent 2"/>
<w:LsdException Locked="false" Priority="52"
Name="Grid Table 7 Colorful Accent 2"/>
<w:LsdException Locked="false" Priority="46"
Name="Grid Table 1 Light Accent 3"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2 Accent 3"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3 Accent 3"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4 Accent 3"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark Accent 3"/>
<w:LsdException Locked="false" Priority="51"
Name="Grid Table 6 Colorful Accent 3"/>
<w:LsdException Locked="false" Priority="52"
Name="Grid Table 7 Colorful Accent 3"/>
<w:LsdException Locked="false" Priority="46"
Name="Grid Table 1 Light Accent 4"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2 Accent 4"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3 Accent 4"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4 Accent 4"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark Accent 4"/>
<w:LsdException Locked="false" Priority="51"
Name="Grid Table 6 Colorful Accent 4"/>
<w:LsdException Locked="false" Priority="52"
Name="Grid Table 7 Colorful Accent 4"/>
<w:LsdException Locked="false" Priority="46"
Name="Grid Table 1 Light Accent 5"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2 Accent 5"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3 Accent 5"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4 Accent 5"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark Accent 5"/>
<w:LsdException Locked="false" Priority="51"
Name="Grid Table 6 Colorful Accent 5"/>
<w:LsdException Locked="false" Priority="52"
Name="Grid Table 7 Colorful Accent 5"/>
<w:LsdException Locked="false" Priority="46"
Name="Grid Table 1 Light Accent 6"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2 Accent 6"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3 Accent 6"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4 Accent 6"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark Accent 6"/>
<w:LsdException Locked="false" Priority="51"
Name="Grid Table 6 Colorful Accent 6"/>
<w:LsdException Locked="false" Priority="52"
Name="Grid Table 7 Colorful Accent 6"/>
<w:LsdException Locked="false" Priority="46" Name="List Table 1 Light"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark"/>
<w:LsdException Locked="false" Priority="51" Name="List Table 6 Colorful"/>
<w:LsdException Locked="false" Priority="52" Name="List Table 7 Colorful"/>
<w:LsdException Locked="false" Priority="46"
Name="List Table 1 Light Accent 1"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2 Accent 1"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3 Accent 1"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4 Accent 1"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark Accent 1"/>
<w:LsdException Locked="false" Priority="51"
Name="List Table 6 Colorful Accent 1"/>
<w:LsdException Locked="false" Priority="52"
Name="List Table 7 Colorful Accent 1"/>
<w:LsdException Locked="false" Priority="46"
Name="List Table 1 Light Accent 2"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2 Accent 2"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3 Accent 2"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4 Accent 2"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark Accent 2"/>
<w:LsdException Locked="false" Priority="51"
Name="List Table 6 Colorful Accent 2"/>
<w:LsdException Locked="false" Priority="52"
Name="List Table 7 Colorful Accent 2"/>
<w:LsdException Locked="false" Priority="46"
Name="List Table 1 Light Accent 3"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2 Accent 3"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3 Accent 3"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4 Accent 3"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark Accent 3"/>
<w:LsdException Locked="false" Priority="51"
Name="List Table 6 Colorful Accent 3"/>
<w:LsdException Locked="false" Priority="52"
Name="List Table 7 Colorful Accent 3"/>
<w:LsdException Locked="false" Priority="46"
Name="List Table 1 Light Accent 4"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2 Accent 4"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3 Accent 4"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4 Accent 4"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark Accent 4"/>
<w:LsdException Locked="false" Priority="51"
Name="List Table 6 Colorful Accent 4"/>
<w:LsdException Locked="false" Priority="52"
Name="List Table 7 Colorful Accent 4"/>
<w:LsdException Locked="false" Priority="46"
Name="List Table 1 Light Accent 5"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2 Accent 5"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3 Accent 5"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4 Accent 5"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark Accent 5"/>
<w:LsdException Locked="false" Priority="51"
Name="List Table 6 Colorful Accent 5"/>
<w:LsdException Locked="false" Priority="52"
Name="List Table 7 Colorful Accent 5"/>
<w:LsdException Locked="false" Priority="46"
Name="List Table 1 Light Accent 6"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2 Accent 6"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3 Accent 6"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4 Accent 6"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark Accent 6"/>
<w:LsdException Locked="false" Priority="51"
Name="List Table 6 Colorful Accent 6"/>
<w:LsdException Locked="false" Priority="52"
Name="List Table 7 Colorful Accent 6"/>
</w:LatentStyles>
</xml><![endif]-->
<!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin:0in;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:Calibri;
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;}
</style>
<![endif]-->
<!--StartFragment-->
<!--EndFragment--><br />
<div class="MsoNormal" style="line-height: 115%;">
<br /></div>
Information Insightshttp://www.blogger.com/profile/01560037005312811863noreply@blogger.com0tag:blogger.com,1999:blog-132420452883280664.post-84676792334417939432016-04-29T07:39:00.003-07:002016-04-29T07:39:57.084-07:00Don't Ignore More Than You Expect - Notes On Whitelisting Objects in Policies<i style="background-color: white; color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13.2px; line-height: 18.48px;">by John Haldeman, Enterprise Architect</i><br />
<i style="background-color: white; color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13.2px; line-height: 18.48px;"><br /></i>
<span style="background-color: white;"><span style="color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;"><span style="font-size: 13.2px; line-height: 18.48px;">We had a customer using DB2/z that was receiving a lot of events from SYSIBM.SYSDUMMY1. So, they wanted to implement a rule as shown in Figure 1:</span></span></span><br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhzcfm6NSO0mqPgwA3B3bu8BbwLz79ZObzba_TELrd2G164BMPcaa6shaQXErqA4GXjgw7fXrKb2bnnwfAP5_RH-JErGij4n2IRYCTyCNN3Ujz3xgXAQv5a5f5i8XgcU8zCwv33a8kprrKG/s1600/SkipLoggingOnSYSIBMSYSDUMMY1.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" height="341" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhzcfm6NSO0mqPgwA3B3bu8BbwLz79ZObzba_TELrd2G164BMPcaa6shaQXErqA4GXjgw7fXrKb2bnnwfAP5_RH-JErGij4n2IRYCTyCNN3Ujz3xgXAQv5a5f5i8XgcU8zCwv33a8kprrKG/s400/SkipLoggingOnSYSIBMSYSDUMMY1.png" width="400" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Figure 1: Policy Rule to SKIP LOGGING on SYSIBM.SYSDUMMY1 - Click to Enlarge</td></tr>
</tbody></table>
<span style="color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;"><span style="background-color: white; font-size: 13.2px; line-height: 18.48px;">This seemingly simple and innocuous rule has some unintended consequences. That's what this blog post is all about.</span></span><br />
<span style="color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;"><span style="background-color: white; font-size: 13.2px; line-height: 18.48px;"></span></span><br />
<a name='more'></a><span style="color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;">I'm going to switch to ORACLE, because that's the lab environment I currently have running. The ORACLE equivalent rule is the following:</span><br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjFAuXOO-uyH6Y3K0sID9T0DKuebFUr5sfWzR6xNg-9dmoioPhmmQkekWKMiKJJNHA5s0R_ZpSmIe4GG4LDIFcSK9GiiXx3Jos1C3jBfWTUPFj4nYE5eWoqE-1QzIDsstqjLf97h2cx-2Re/s1600/SkipLoggingOnDUAL.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" height="337" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjFAuXOO-uyH6Y3K0sID9T0DKuebFUr5sfWzR6xNg-9dmoioPhmmQkekWKMiKJJNHA5s0R_ZpSmIe4GG4LDIFcSK9GiiXx3Jos1C3jBfWTUPFj4nYE5eWoqE-1QzIDsstqjLf97h2cx-2Re/s400/SkipLoggingOnDUAL.png" width="400" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Figure 2: <span style="font-size: 12.8px;">Policy Rule to SKIP LOGGING on DUAL - Click to Enlarge</span></td></tr>
</tbody></table>
<div>
<div>
<span style="background-color: white; color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13.2px; line-height: 18.48px;">Let's add another rule, to make a total of two, to illustrate that this ignores more than you might expect. That's pictured in Figure 3:</span></div>
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhk7fOg__wW0rs98AiaMIMCtxmsnY14AIPODbS2mZHzwcM-Jt7bLSx5McNeRmmZ4jAJGW6-Vhtdo2h3K2JQOBWfxFRx0wYE0f-XyBJ7cHhsT3bTbNABQUdotsWMuqoqvx8BDsHrXhpv2tbF/s1600/LogFullSQLonTheRest.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" height="176" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhk7fOg__wW0rs98AiaMIMCtxmsnY14AIPODbS2mZHzwcM-Jt7bLSx5McNeRmmZ4jAJGW6-Vhtdo2h3K2JQOBWfxFRx0wYE0f-XyBJ7cHhsT3bTbNABQUdotsWMuqoqvx8BDsHrXhpv2tbF/s640/LogFullSQLonTheRest.png" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Figure 3: Policy Rule to Log Full Details on All Traffic Not Skipped by the Rule in Figure 2 - <span style="font-size: 12.8px;">Click to Enlarge</span></td></tr>
</tbody></table>
<div>
<span style="background-color: white; color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13.2px; line-height: 18.48px;"><br /></span></div>
<div>
<span style="background-color: white; color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13.2px; line-height: 18.48px;">Let's run some commands (shown in Figure 4), and see what the results are in Guardium (Figure 5).</span></div>
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgE1FtJtCaPO2_vHNyU5caFX8NVj4MQN7OWbXkY1DmI3hVYHhbTFARTA8_Fdv4SObpEDStEkiVqTrCRyDFAT_6wcZRoskZPn81jTIOqIoBn22H33CyA-OmXEa4VmJ_oFDW2RmReVfq5OXZU/s1600/CommandsRun.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" height="155" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgE1FtJtCaPO2_vHNyU5caFX8NVj4MQN7OWbXkY1DmI3hVYHhbTFARTA8_Fdv4SObpEDStEkiVqTrCRyDFAT_6wcZRoskZPn81jTIOqIoBn22H33CyA-OmXEa4VmJ_oFDW2RmReVfq5OXZU/s400/CommandsRun.png" width="400" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Figure 4: Commands run in ORACLE environment</td></tr>
</tbody></table>
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh-wUntYsQAzzaJNWZDEtagdOycA8ivu9Q_6tVJAxvr44O-1BerEFg4nZ2Oo2DwngfrU0YYjiZeZuS3qMrG4rQhbRmnqdsKaPEeCBuycs_NG0IkIhqNgFFNczXEygTdke3pmZ5CcBRaGtSt/s1600/FullSQLAfterPolicyInstall.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" height="139" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh-wUntYsQAzzaJNWZDEtagdOycA8ivu9Q_6tVJAxvr44O-1BerEFg4nZ2Oo2DwngfrU0YYjiZeZuS3qMrG4rQhbRmnqdsKaPEeCBuycs_NG0IkIhqNgFFNczXEygTdke3pmZ5CcBRaGtSt/s640/FullSQLAfterPolicyInstall.png" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Figure 5: Resulting Data in Guardium</td></tr>
</tbody></table>
<div>
<span style="background-color: white; color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13.2px; line-height: 18.48px;">This looks good. The SELECT on hr.employees was captures, but the SELECT on dual was not - looks like it's running as intended.</span></div>
<div>
<span style="background-color: white; color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13.2px; line-height: 18.48px;"><br /></span></div>
<div>
<span style="background-color: white; color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13.2px; line-height: 18.48px;">Now for the unintended consequences. How about the SQL in Figure 6:</span></div>
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj4a1loG_N5PYRVm9soF5L-cm5YdFeyu5TQGfcNRpdM7Wr8SYCS-s17xlBQKvjjGPl9BBdoQisusSpw3IOU8OYA3Z5tSFbRLKjzUUf-txoHjhNLLJD2ApksSCzjIJCoFnlunkJKD_QWqrAU/s1600/CompoundSQLWithDual.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" height="85" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj4a1loG_N5PYRVm9soF5L-cm5YdFeyu5TQGfcNRpdM7Wr8SYCS-s17xlBQKvjjGPl9BBdoQisusSpw3IOU8OYA3Z5tSFbRLKjzUUf-txoHjhNLLJD2ApksSCzjIJCoFnlunkJKD_QWqrAU/s400/CompoundSQLWithDual.png" width="400" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Figure 6: Exection of "select count(*) from hr.employees, dual"</td></tr>
</tbody></table>
<div>
<span style="color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;"><span style="background-color: white; font-size: 13.2px; line-height: 18.48px;">Same result as "select count (*) from hr.employees". In fact since "dual" is a single record table, you can append it to any list of tables and the same results will be returned (because it's a cartesian product on a table with one row in it). This statement is skipped by Guardium since it contains dual as one of the objects in the SQL statement - not what we intended.</span></span></div>
<div>
<span style="color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;"><span style="background-color: white; font-size: 13.2px; line-height: 18.48px;"><br /></span></span></div>
<div>
<span style="color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;"><span style="background-color: white; font-size: 13.2px; line-height: 18.48px;">If you are more concerned about data integrity, here's is a use of dual to modify data. It is skipped by our policy as well:</span></span></div>
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEih8lHkIURpgNMQ9a1EYxlxb9Cve7nR81zhZoicXj0G1-HIyH7qmQ-CV6PypHNDOnp0JKQCN60VMLmUUz16Xz4_VkqD-UXINyr81WBNwSlShP4db1R_DndqqZ-NQOw5SJGCMq0XSD0gRuxB/s1600/CompoundINSERTWithDual.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" height="96" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEih8lHkIURpgNMQ9a1EYxlxb9Cve7nR81zhZoicXj0G1-HIyH7qmQ-CV6PypHNDOnp0JKQCN60VMLmUUz16Xz4_VkqD-UXINyr81WBNwSlShP4db1R_DndqqZ-NQOw5SJGCMq0XSD0gRuxB/s400/CompoundINSERTWithDual.png" width="400" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Figure 7: Execution of 'insert into hr.employees (EMPLOYEE_ID, FIRST_NAME, LAST_NAME, EMAIL, HIRE_DATE, JOB_ID) select 10000, 'John', 'H', 'john.haldeman@skipped.com', '07-JUN-02', 'AC_MGR' from dual;'</td></tr>
</tbody></table>
<div>
<span style="color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;"><span style="background-color: white; font-size: 13.2px; line-height: 18.48px;">That's a compound INSERT into hr.employees with a SELECT of literal values from dual. Since it is evaluated as one statement in the policy, the record is skipped.</span></span></div>
<div>
<span style="color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;"><span style="background-color: white; font-size: 13.2px; line-height: 18.48px;"><br /></span></span></div>
<div>
<span style="color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;"><span style="background-color: white;"><span style="font-size: 13.2px; line-height: 18.48px;">Now, these examples may seem contrived, but the fact is that the policy can be circumvented if the person running the commands knows enough about the policy - not a good practice. The solutions to this vary. Some people try and use regular expression matching to try and avoid missing the true positives. That approach, to me, relies on the person writing the regular expression to know an awful lot about SQL and every way a dummy table might be used. As such, my preferred method is to not ignore the statements at all. Instead filter them out at the report level where Guardium makes an effort to split the statements above into sentences and distinct objects.</span></span></span></div>
<div>
<span style="color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;"><span style="background-color: white;"><span style="font-size: 13.2px; line-height: 18.48px;"><br /></span></span></span></div>
<div>
<span style="color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;"><span style="background-color: white;"><span style="font-size: 13.2px; line-height: 18.48px;">One final note before I end this posting. This problem extends to all SQL based criteria that you might be whitelisting. SQL statements may contain many COMMANDS as well as objects, so if you are in the business of whitelisting watch out for the same unintended consequences with those criteria. Session level parameters on the other hand do not have the same kind of problem - this is only one database username and client IP per session for example - so whitelisting there is quite safe.</span></span></span></div>
<div>
<span style="background-color: white; color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13.2px; line-height: 18.48px;"><br /></span></div>
<div>
<span style="background-color: white; color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13.2px; line-height: 18.48px;"><br /></span></div>
<div>
<br /></div>
<div>
<span style="background-color: white; color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13.2px; line-height: 18.48px;"><br /></span></div>
<div>
<span style="background-color: white; color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13.2px; line-height: 18.48px;"><br /></span></div>
<div>
<span style="background-color: white; color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13.2px; line-height: 18.48px;"><br /></span></div>
</div>
Information Insightshttp://www.blogger.com/profile/01560037005312811863noreply@blogger.com0tag:blogger.com,1999:blog-132420452883280664.post-8492518377746791832016-04-20T07:01:00.000-07:002016-04-20T07:01:03.775-07:00Why Outlier Detection Won't Save You<i style="background-color: white; color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13.2px; line-height: 18.48px;">by John Haldeman, Enterprise Architect</i><br />
<i style="background-color: white; color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13.2px; line-height: 18.48px;"><br /></i>
<span style="color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;"><span style="background-color: white; font-size: 13.2px; line-height: 18.48px;">Now that it's been out for awhile, I feel like it's time for some hard truths on <a href="http://www.ibm.com/developerworks/library/se-guardium-outlier-hidden-threats-trs/">Guardium Outlier Detection</a>. Before I get into some of it's limitations, I want say that it does indeed work, and it is indeed useful and powerful. This post is meant to serve as a healthy discussion on the practical problems of using it. To be clear, I would rather use the function than not - ie: it provides more value than what it costs to deal with the issues below.</span></span><br />
<br />
<a name='more'></a><br />
<h2>
<span style="background-color: white; color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13.2px; line-height: 18.48px;">1) Abnormal non-malicious stuff happens all the time</span></h2>
<span style="background-color: white; color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13.2px; line-height: 18.48px;">This is one of the "top two" issues with the outlier analysis of this sort. The fact of the matter is unusual things happen in databases all the time. DBAs are in particular very random. Day to day they may touch objects in a database that they never have before. There are so many system objects and combinations of things they could access that a lot of what outliers will show you is the DBA doing their jobs.</span><br />
<span style="background-color: white; color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13.2px; line-height: 18.48px;"><br /></span>
<span style="background-color: white;"><span style="color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;"><span style="font-size: 13.2px; line-height: 18.48px;">That being said, it's not unhelpful to have this information, it's just going to be reported to you constantly (I also hesitate to white list DBA work). </span></span></span><span style="background-color: white;"><span style="color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;"><span style="font-size: 13.2px; line-height: 18.48px;">On top of this, pretty much everyone reports on the activity from DBAs already, so now you have to process and review the same data - twice (once in outliers, once in your privileged user reports).</span></span></span><br />
<span style="background-color: white; color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13.2px; line-height: 18.48px;"><br /></span>
<span style="background-color: white; color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13.2px; line-height: 18.48px;">Of course you can manage this, but never succumb to the thinking that outliers is going to solve all the problems with activity monitoring review and whitelist management.</span><br />
<h2>
<span style="background-color: white;"><span style="color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;"><span style="font-size: 13.2px; line-height: 18.48px;">2) High risk behavior is likely happening all the time (and as a result are trained into outliers)</span></span></span></h2>
<div>
<span style="color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;"><span style="background-color: white; font-size: 13.2px; line-height: 18.48px;">True story: Alice is a business analyst in charge of reviewing records related to healthcare claims. She has modest technical skills and knows enough to be able to run a database query on a daily basis from her workstation under her desk to transfer her claims data from a remote database that you monitor to a local access database for easier review. That access database is consequently on a share that has READ granted to EVERYONE.</span></span></div>
<div>
<span style="color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;"><span style="background-color: white; font-size: 13.2px; line-height: 18.48px;"><br /></span></span></div>
<div>
<span style="color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;"><span style="background-color: white;"><span style="font-size: 13.2px; line-height: 18.48px;">This is trained into outliers as "normal" - it is normal - but clearly it's tremendously risky behavior. Outliers help you analyze and respond to certain risky behaviour, but not all of it. My bet is that in your database environment risky behavior is occurring all the time.</span></span></span></div>
<h2>
<span style="color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;"><span style="background-color: white;"><span style="font-size: 13.2px; line-height: 18.48px;">3) It doesn't tell you anything about what you don't log</span></span></span></h2>
<div>
<span style="color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;"><span style="background-color: white;"><span style="font-size: 13.2px; line-height: 18.48px;">This may seem obvious, but outliers performs analysis on data already captured by Guardium. If your policy prevents the SQL constructs from being captured for certain sessions, outliers is not going to tell you anything about those constructs. It's also a best practice not to log constructs for everything in most environments, and so a lot of effort still has to go into managing what's logged. Outleirs doesn't absolve you from that responsibility.</span></span></span></div>
<h2>
<span style="color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;"><span style="background-color: white;"><span style="font-size: 13.2px; line-height: 18.48px;">4) If it tells you what's new, and you start to log something new, it's tells you</span></span></span></h2>
<div>
<span style="color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;"><span style="background-color: white;"><span style="font-size: 13.2px; line-height: 18.48px;">This tautological statement boils down to thinking about what's being logged when and where. If you change your policy and start logging a wide variety of new events, outliers is going to throw a large amount of new hits your way at least in the short term. If you are in the habit of frequently changing your policy, this will happen a lot. </span></span></span></div>
<div>
<span style="color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;"><span style="background-color: white;"><span style="font-size: 13.2px; line-height: 18.48px;"><br /></span></span></span></div>
<div>
<span style="color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;"><span style="background-color: white;"><span style="font-size: 13.2px; line-height: 18.48px;">Additionally, outlier models are local to the collectors which means in the event of a failover, it's not going to have the history for the server that's failing over to the new collector. This also generates a lot of new events for you to process.</span></span></span></div>
<div>
<span style="color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;"><span style="background-color: white;"><span style="font-size: 13.2px; line-height: 18.48px;"><br /></span></span></span></div>
<div>
<span style="color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;"><span style="background-color: white;"><span style="font-size: 13.2px; line-height: 18.48px;"><br /></span></span></span></div>
<div>
<span style="color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;"><span style="background-color: white;"><span style="font-size: 13.2px; line-height: 18.48px;"><br /></span></span></span></div>
<div>
<span style="color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;"><span style="background-color: white;"><span style="font-size: 13.2px; line-height: 18.48px;">Again, this isn't a critique about outliers, but I think it's important to think about it differently than maybe how it's discussed sometimes. Outliers is another data point you get to manage, analyze and whitelist. The developerworks article I link to at the top of this blog posting have some great strategies for performing that management. Outliers doesn't make life easier. It makes Guardium more valuable because it's giving you an additional data point to analyze. it doesn't make the other data points you need to analyze go away.</span></span></span></div>
<div>
<span style="color: #666666; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;"><span style="background-color: white;"><span style="font-size: 13.2px; line-height: 18.48px;"><br /></span></span></span></div>
Information Insightshttp://www.blogger.com/profile/01560037005312811863noreply@blogger.com0tag:blogger.com,1999:blog-132420452883280664.post-81991929337391178472016-02-02T06:33:00.001-08:002016-03-28T06:39:49.126-07:00Information Insights and jSonar Partner to Optimize IBM Guardium Database Security Solutions <div class="MsoNormal">
<span style="mso-bidi-font-style: normal;"><span style="color: black; font-family: inherit; font-size: 10pt;">Newly announced partnership combines the experience and knowledge of
<a href="http://infoinsightsllc.com/">Information Insights</a> with the SonarG Big Data Platform from <a href="http://www.jsonar.com/">jSonar</a> to enable
IBM Guardium clients to more fully leverage their Guardium systems while
reducing costs and complexity. <o:p></o:p></span></span></div>
<div class="MsoNormal">
<span style="font-family: inherit;"><br /></span></div>
<div class="MsoNormal">
<span style="color: black; font-family: inherit; font-size: 10.0pt;">February 2, 2016 (Atlanta, GA) – Information
Insights, LLC, an IBM Premier Business Partner, is pleased to announce their
partnership with jSonar, an industry-leading Big Data technology provider with
a deep technical understanding of the IBM Guardium Database Security
architecture. The combination of these strengths will enable IBM Guardium
customers to accelerate and expand upon the compliance and security benefits of
the IBM Guardium system via the next generation SonarG Big Data solution. <o:p></o:p></span></div>
<div class="MsoNormal">
<span style="font-family: inherit;"><br /></span></div>
<div class="MsoNormal" style="margin-bottom: 12.0pt; mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="color: black; font-family: inherit; font-size: 10.0pt;">Information Insights helps clients improve
their security posture through robust data security, privacy and encryption
strategies and solutions. By delivering SonarG, Information Insights continues
to expand upon the tools at their disposal to help clients advance their data
governance programs, while at the same time addressing key business challenges
around cost of ownership and scalability.<o:p></o:p></span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: inherit;"><span style="color: black; font-size: 10.0pt;">“Partnering with
jSonar to help bring SonarG to market represents a critical opportunity for
Information Insights and our Guardium clients,” said Bill Crawford, Information
Insights CEO. “jSonar is collaborating with Information Insights and IBM to
modernize Guardium implementations and enable clients to </span><span style="color: black; font-size: 10.0pt;">realize even greater benefit and value from
their Guardium investment</span><span style="color: black; font-size: 10.0pt;">.”<o:p></o:p></span></span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: inherit;"><br /></span></div>
<div class="MsoNormal" style="margin-bottom: 12.0pt; mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: inherit;"><span style="color: black; font-size: 10.0pt;">"Information
Insights has a long and very successful track record in enabling customer
success with IBM Guardium DAM," said Ron BenNatan, jSonar Founder,
"and we are excited about the opportunity to join forces to help clients </span><span style="color: black; font-size: 10.0pt;">optimize their use of IBM Guardium</span><span style="color: black; font-size: 10.0pt;">."</span><span style="color: black; font-size: 10.0pt;"><o:p></o:p></span></span></div>
<div class="MsoNormal" style="margin-bottom: 12.0pt; mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: inherit;"><span style="color: black; font-size: 10.0pt;">SonarG<span style="mso-bidi-font-style: normal;"> </span>was
developed by key technologists from the original Guardium engineering team and merges
that knowledge with their next generation Big Data warehousing technology. The
resulting</span><span style="color: black; font-size: 10.0pt;"> solution
is specifically built for optimizing Guardium data aggregation, infrastructure
and storage, enabling clients to simplify their deployment, extend their data
collection and retention policies to a year or longer, while also providing
improved access to database activity data for reporting and security analytics.
<o:p></o:p></span></span></div>
<div class="MsoNormal" style="margin-bottom: 12.0pt; mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="color: black; font-family: inherit; font-size: 10.0pt;">Information
Insights, North America’s only Gold Accredited Guardium Partner, and jSonar will
be available to offer further insight into this advanced solution at <a href="http://www.ibm.com/cloud-computing/us/en/interconnect/">IBM’s 2016 InterConnect Conference</a>, being held February 21-25, in Las Vegas, Nevada. <o:p></o:p></span></div>
<div style="background: white; line-height: 115%; margin-bottom: .0001pt; margin: 0in;">
<span style="color: black; font-family: inherit; font-size: 10.0pt; line-height: 115%;">____________________________________________________________________________<br />
</span><br />
<span style="font-family: inherit;"><span style="color: black; font-size: 10.0pt; line-height: 115%;"><b style="mso-bidi-font-weight: normal;">About Information Insights </b></span></span><br />
<span style="font-family: inherit;"><span style="color: black; font-size: 10.0pt; line-height: 115%;">Information Insights, LLC, an IBM Premier Business Partner, is a
software solutions provider focused on helping companies improve enterprise
data management. With domain expertise in the areas of data security, data
privacy and data lifecycle management. Info Insights has the skills and
experience required to help clients drive cost reduction and risk mitigation in
their enterprise application portfolios.</span><br /><b style="mso-bidi-font-weight: normal;"><span style="color: black; font-size: 10.0pt; line-height: 115%;"><br /></span></b></span><br />
<span style="font-family: inherit;"><b style="mso-bidi-font-weight: normal;"><span style="color: black; font-size: 10.0pt; line-height: 115%;">About jSonar</span></b><br /><span style="color: black; font-size: 10.0pt; line-height: 115%;">jSonar
is a VC-based company headquartered in Boston, MA, founded by serial
entrepreneurs and industry veterans with expertise in the areas of databases,
Big Data and Guardium. Their core focus is making Big Data work more easily and
efficiently for enterprises. An emphasis on unique technology translates into
better experiences and better outcomes for their customers.</span></span></div>
<!--[if gte mso 9]><xml>
<o:DocumentProperties>
<o:Revision>0</o:Revision>
<o:TotalTime>0</o:TotalTime>
<o:Pages>1</o:Pages>
<o:Words>515</o:Words>
<o:Characters>2940</o:Characters>
<o:Company>Thinkvss</o:Company>
<o:Lines>24</o:Lines>
<o:Paragraphs>6</o:Paragraphs>
<o:CharactersWithSpaces>3449</o:CharactersWithSpaces>
<o:Version>14.0</o:Version>
</o:DocumentProperties>
<o:OfficeDocumentSettings>
<o:RelyOnVML/>
<o:AllowPNG/>
<o:PixelsPerInch>96</o:PixelsPerInch>
</o:OfficeDocumentSettings>
</xml><![endif]-->
<!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves/>
<w:TrackFormatting/>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>EN-US</w:LidThemeOther>
<w:LidThemeAsian>JA</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="true"
DefSemiHidden="true" DefQFormat="false" DefPriority="99"
LatentStyleCount="276">
<w:LsdException Locked="false" Priority="0" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" Priority="39" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" Name="toc 9"/>
<w:LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" Priority="10" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" Priority="11" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" Priority="22" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" Priority="59" SemiHidden="false"
UnhideWhenUsed="false" Name="Table Grid"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/>
</w:LatentStyles>
</xml><![endif]-->
<!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin:0in;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:Calibri;
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;}
</style>
<![endif]-->
<!--StartFragment-->
<!--EndFragment--><br />
<div class="MsoNormal" style="line-height: 115%;">
<span style="color: black; font-family: "century gothic"; font-size: 10.0pt; line-height: 115%;"><br /></span></div>
Information Insightshttp://www.blogger.com/profile/01560037005312811863noreply@blogger.com0tag:blogger.com,1999:blog-132420452883280664.post-47236594816194605312015-09-07T18:57:00.002-07:002015-09-09T13:34:05.182-07:00Building an LDAP/AD Group Membership Report in Guardium<i> by John Haldeman, Practice Lead</i><br />
<br />
<br />
Guardium Entitlement Reports are a useful feature that help you determine what privileges have been assigned in your databases. It's primary value is in helping you create standardized reporting for entitlements based on the database catalog information in each database without you having to create custom scripts.<br />
<br />
This being said, that's all Guardium does - query the database catalogs of the databases you register and shows you that information. Certain database types, MS SQL Server for instance, may obscure who the end user that has a certain privilege is because the database catalog just has a listing for the groups assigned, not the users in those groups. An example is show in figure 1. A role for a MS SQL Server database is shown to be assigned to a WINDOWS_GROUP. Invariably, the next question becomes: who is in that Windows group, and can I see that information in the same report set and environment I am getting delivered to me anyway rather than having to look up the information in my corporate directory server separately.<br />
<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggkFDnUUnd6Y5iw9WsYsxAqD2HlYh94AD0TxZd28RWpOvKfQTpBq2FgJEM2QuK7hGT32lyd9EZrX5ZXuNR_qtkwtQqO7QyaMEM0N0o_EpmRDrHeH8UYf_ZRLakjXmF2P9xE1fzFilypedd/s1600/RoleGrantedToWINDOWS_GROUP.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" height="140" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggkFDnUUnd6Y5iw9WsYsxAqD2HlYh94AD0TxZd28RWpOvKfQTpBq2FgJEM2QuK7hGT32lyd9EZrX5ZXuNR_qtkwtQqO7QyaMEM0N0o_EpmRDrHeH8UYf_ZRLakjXmF2P9xE1fzFilypedd/s640/RoleGrantedToWINDOWS_GROUP.png" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Figure 1: A Guardium Entitlement Report showing a role assigned to two groups: TESTDIR\testgroup1 and TESTDIR\testgroup2 - Who are the users in those groups?</td></tr>
</tbody></table>
<br />
Building a report on that group membership is what this post is all about. You should be warned though: Guardium is not very good at this. In this post you will see mechanisms to try and help make this happen but keep in mind that these mechanisms were not originally designed to fulfill this specific use case. So, it may start to feel a little awkward in making this happen. <br />
<br />
<a name='more'></a><br />
<br />
Before we go into specifics, here is an overview of what needs to be done. Figure 2 outlines the process.<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhLUw9yhPJmRqs3cxMbOutR4rU7xf-6rtwleV32732Dw_t27kXupsDMXSjl3uox-aergnvPM4KSG3tJCmuOg3kouhu0CCBEtHgsa6DpWRLT5lVGJ1-O4ta1RztK0MiIe7ntkTWcUgrmnPG8/s1600/LDAPADGroupReportingOverview.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" height="120" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhLUw9yhPJmRqs3cxMbOutR4rU7xf-6rtwleV32732Dw_t27kXupsDMXSjl3uox-aergnvPM4KSG3tJCmuOg3kouhu0CCBEtHgsa6DpWRLT5lVGJ1-O4ta1RztK0MiIe7ntkTWcUgrmnPG8/s400/LDAPADGroupReportingOverview.png" width="400" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Figure 2: Process for Active Directory and LDAP Group Membership Reporting in Guardium</td></tr>
</tbody></table>
<br />
This example is built for MS SQL Server and Active Directory, but the same principles would apply for other database and directory server types. The first task to to take the entitlement report that you are seeing the groups listed in and create a special custom column to flip the domain and group names in the reported values. This will seem strange, but the reasons will become apparent later. Then populate a "bindValues" group to contain all of the groups you are interested in. This group can be populated automatically from the entitlement report using Guardium's "Populate From Query" function and the specialized column you created to switch the domain and group name. Next, populate a regular group to use the bindValues group and set it up to populate from LDAP. The end results will be members of that group that will show the group name following by a backslash ("\") followed by the member of the group. Finally build a report on that group to show what end user is in each active directory group.<br />
<br />
<h2>
Step 1: The Entitlement Report and Custom Column</h2>
For this example, let's use the "mssql2005/8 Role Granted To User And Role" built-in entitlement report. That is the same report pictured previously in Figure 1. Build a custom computed column on that entitlement report using the following grdapi call:<br />
<blockquote class="tr_bq">
grdapi create_computed_attribute expression="concat(substring_index(Grantee, CHAR(92), -1), CHAR(92), substring_index(Grantee, CHAR(92), 1))" entityLabel="MSSQL2005/8 Role Granted To User And Role" attributeLabel=GroupUserFlip</blockquote>
All the expression does is, for values that contain a backslash, have the values before and after the slash trade places (eg: "DOMAIN\group_name" becomes "group_name\DOMAIN"). This creates a new column in the "MSSQL2005/8: Role Granted To User And Role" domain called GroupUserFlip. Next, create a query that includes that new column and limits the output to just WINDOWS_GROUP values (see Figure 3). You can create a report like this by accessing as admin: Tools --> Report Building --> Custom Query Buider --> MSSQL2005/8: Role Granted To User And Role --> New, or by cloning and modifying the existing entitlement report built off that domain.<br />
<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhRNKfq7aKhY04olcFnrtozElXI32tnkpWnnG4yM8gcpHQGBoCJEndpbYsjnHfxps64IU60vyIYnXCQJt7phNIPQAAM3iy3T9GpzmLM4Vd0PZebDO-I2fK7o0gOn4k5OZRJDtLQmFNEdlQm/s1600/ReportWithGroupUserFlip.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" height="274" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhRNKfq7aKhY04olcFnrtozElXI32tnkpWnnG4yM8gcpHQGBoCJEndpbYsjnHfxps64IU60vyIYnXCQJt7phNIPQAAM3iy3T9GpzmLM4Vd0PZebDO-I2fK7o0gOn4k5OZRJDtLQmFNEdlQm/s640/ReportWithGroupUserFlip.png" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Figure 3: Report With New Custom Computed Column and WINDOWS_GROUP Filter</td></tr>
</tbody></table>
<br />
<h2>
Step 2: Create and Populate the bindValues Group</h2>
<div class="separator" style="clear: both; text-align: center;">
</div>
bindValues groups are special groups that allow you to run multiple LDAP/AD queries in one operation rather than creating multiple groups. They also have a function to allow you to insert the domain into the group members before a blackslash. We will actually be using that function, normally used to insert domain names, to insert the group name that was looked up into the group members retrieved.<br />
<br />
Create and Configure a new group as an OBJECTS type group. Call the group "- AD Group Membership_bindValues". Next, in the group builder, select the group and click "Populate From Query". Then configure that population process according to what is shown in Figure 4. You will populate the group based on the query and new custom column you created in Step 1.<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh2ZmEZLp1-0olpApsqBfrZpA6MRSkn8mEETrd3JXeOFiIDTpxHZMmMfIq_1rSsdcCHnMqRKvp9aH9NNcdeq7O8Sp2z4m18WF1peF_We3SZEo0zCwg7MWdmsGWagzjaG2TMkn6qF7p3Zekg/s1600/ADLDAPGroupMembershipPopFromQuery.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" height="352" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh2ZmEZLp1-0olpApsqBfrZpA6MRSkn8mEETrd3JXeOFiIDTpxHZMmMfIq_1rSsdcCHnMqRKvp9aH9NNcdeq7O8Sp2z4m18WF1peF_We3SZEo0zCwg7MWdmsGWagzjaG2TMkn6qF7p3Zekg/s640/ADLDAPGroupMembershipPopFromQuery.png" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Figure 4: Populating the bindValues Group Based on the Query and Customer Computed Attribute Created in Step 1</td></tr>
</tbody></table>
Note that the value of From Date parameter does not matter as long as it is a value that is prior to when you first started running entitlement reports. Also, note that you can safely ignore the "Column Type" warning that appears in Orange. Finally, if you are automatically refreshing your entitlement reports, set a schedule to run this after your entitlement reports have been repopulated.<br />
<br />
<h2>
Step 3: Configure the LDAP/AD Import</h2>
Now that the bindValues group is created, you can create another group that will use that group's content as parameters in it's LDAP/AD queries. Create this new group with a type of "USERS" and name it "- AD Group Membership" (note that it has the same name as the group in Step 2, without the "_bindValues" prefix - if you are using your own group names, just follow that convention). Configure the LDAP Import for this group similarly to what is pictured in Figure 4.<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhSmdc97Lzq2Nj11si-G1uB5tslwp11olJU3GreEKQ8FMlNJazbgUyGN5FbOokz4L1_LqVtQwJFWoHcNuJwFfSXLo0cSwfCh3Pl-8d6AxpeZgskhWjHoUROyPEIqBhhnTn1-RLBK6ufshTC/s1600/LDAPGroupMembershipImport.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhSmdc97Lzq2Nj11si-G1uB5tslwp11olJU3GreEKQ8FMlNJazbgUyGN5FbOokz4L1_LqVtQwJFWoHcNuJwFfSXLo0cSwfCh3Pl-8d6AxpeZgskhWjHoUROyPEIqBhhnTn1-RLBK6ufshTC/s400/LDAPGroupMembershipImport.png" width="372" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Figure 4: LDAP Group Import Configuration</td></tr>
</tbody></table>
Since it is cut off in the screenshot, the full search filter in or lab environment is:<br />
<blockquote class="tr_bq">
memberof=CN=:2,CN=Users,DC=:1,DC=infoinsightsllc,DC=com</blockquote>
Of course, your configuration is likely to be different, but the important part in the search filter is that ":2" is located where you would normally put in a group name for an LDAP import, and ":1" is located where you normally specify the Active Directory domain you are working with. If you specify the search filter correctly, and run the import, it results in entries similar to Figure 5, showing the AD group names before the backslash in each entry, and the AD group member after the backslash.<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiwambPxlQPXBTuCPCLQu0uAfAYLpP__czIcHG8fZIRc6DSjwKXJevxp4vm2Wmlllz5GBj5zLb2HUsyvujQ4X2eLITPKQNVsOyNjQxj1Prm04WGC0XwT_gVvqdNoSZyNG4jWrlhkg1jPoUC/s1600/LDAPImportResults.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" height="260" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiwambPxlQPXBTuCPCLQu0uAfAYLpP__czIcHG8fZIRc6DSjwKXJevxp4vm2Wmlllz5GBj5zLb2HUsyvujQ4X2eLITPKQNVsOyNjQxj1Prm04WGC0XwT_gVvqdNoSZyNG4jWrlhkg1jPoUC/s320/LDAPImportResults.png" width="320" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Figure 5: LDAP Group Import Results showing group names on the left (testgroup1, testgroup2), and group membership on the right (testuser1 belonging to both, and testuser2 belonging to just testgroup2)</td><td class="tr-caption" style="text-align: center;"><br /></td><td class="tr-caption" style="text-align: center;"><br /></td></tr>
</tbody></table>
Similarly to Step 2, if you were automating the reporting of the group membership, you would schedule this LDAP import to happen on a regular basis - this time after the populate from query process in Step 2, but before your audit processes to report on the data run. <br />
<br />
<h2>
Step 4: Reporting on the Imported Group Membership Information</h2>
The final step is to build a report on those imported group members. To do that, build a report on group membership by logging in as a user that is assigned admin and navigating to Tools --> Report Building --> Group Tracking. Create the query similar to that shown in Figure 6.<br />
<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjDBoThDqnhN5O2lcsT5wAvwBXSOQe1uxmYEcC9vaFbk7sKodzgz_0B5abuumxv-oQCxmrqO-eAyy5zXzhtM2rvnB4ESqMBzpnpnl69ZbOd55aUTjGwp8qv0kdh3EoVtOg6gUwkdj_ivRTx/s1600/GroupMembershipReport.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" height="338" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjDBoThDqnhN5O2lcsT5wAvwBXSOQe1uxmYEcC9vaFbk7sKodzgz_0B5abuumxv-oQCxmrqO-eAyy5zXzhtM2rvnB4ESqMBzpnpnl69ZbOd55aUTjGwp8qv0kdh3EoVtOg6gUwkdj_ivRTx/s640/GroupMembershipReport.png" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Figure 6: Report on Group Membership</td></tr>
</tbody></table>
<br />
Figure 7 is the result that you can then apply filters to and/or schedule to put into an audit process for regular delivery with the rest of your entitlement reports.<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj7caPzFQET8zn-nvFnSdCyD8WH8k_SUcS1NKNBW8OPUJcobg-BiWQBvrLeDfJW9HtbG8mTKYsxbD0AO44wkn1sOEVnrXRg_HQlG49ZCYhH4EFwcQjE_ztmFkBUilbdzzOaexOryrfUip1b/s1600/LDAPADGroupReportingFinalResult.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" height="204" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj7caPzFQET8zn-nvFnSdCyD8WH8k_SUcS1NKNBW8OPUJcobg-BiWQBvrLeDfJW9HtbG8mTKYsxbD0AO44wkn1sOEVnrXRg_HQlG49ZCYhH4EFwcQjE_ztmFkBUilbdzzOaexOryrfUip1b/s640/LDAPADGroupReportingFinalResult.png" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Figure 7: The Final Result Showing Active Directory Group Membership for the Groups in Our Original Entitlement Report</td></tr>
</tbody></table>
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />Information Insightshttp://www.blogger.com/profile/01560037005312811863noreply@blogger.com0tag:blogger.com,1999:blog-132420452883280664.post-10255006576706820982015-09-01T06:09:00.003-07:002015-09-01T06:14:43.710-07:00Guardium V10 - Micro Tips #1 - RHEL 6<i>by John Haldeman, Practice Lead</i><br />
<br />
Everyone by now knows that Guardium V10 has been released. It's an exciting release with a lot of features. I expect to see a lot presented and written on the big features like the new UI, file activity monitoring, query rewrite, and new vulnerability assessment data sources, etc. in the next few months. What I want to take some time to do on this blog is talk about the little features that might not get a lot of attention but can make a difference in the everyday lives of Guardium administrators and practitioners like me. I'll be calling those Micro Tips, and this is the first one.<br />
<br />
Since I have just finished deploying a virtual machine in my lab environment for V10, let's talk about the operating system and virtualization (btw, if you want a step by step guide for the installation of Guardium V10 and some things that have changed since V9, <a href="https://guardiumnotes.wordpress.com/2015/08/28/first-look-on-v10-installation-process/">this blog post</a> is a great resource. One particularly nice thing is that the imaging process is now completely unattended - no waiting to enter passwords half way through the install process. That is a great decision.)<br />
<br />
Guardium V10 got an upgrade in it's OS from RHEL 5 to RHEL 6 (RHEL 6.5 to be exact). Since you never really get to touch the underlying operating system, this might be transparent and not matter to you. That being said, it does actually make a difference for some using VMWare deployments using newer types of virtual adapters. If you want to use paravirtual SCSI adapaters (as described <a href="http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1010398">here</a>) and VMXNET3 type virtual network adapters (as described <a href="http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1001805">here</a>), you should now be able to do that a lot more easily. Those drivers were included in RHEL6, but not RHEL5 by default.<br />
<br />
Note, in the case of VMXNET3 adapters, you could enable them in the past <a href="http://www-01.ibm.com/support/docview.wss?uid=swg21650070">with some awkward additional steps</a>, but now since it is running on RHEL6, it *should* come packaged with a VMXNET3 driver and work out the gate.<br />
<br />
Note that I have not confirmed this - my current lab environment doesn't have those options. Theoretically the Guradium organization could have taken the drivers out, but I don't see why they would. I will try and confirm they are in there and update this post.<br />
<br />
<br />
<br />Information Insightshttp://www.blogger.com/profile/01560037005312811863noreply@blogger.com0tag:blogger.com,1999:blog-132420452883280664.post-18096357402722658422015-04-25T05:32:00.001-07:002015-04-26T12:53:12.439-07:00Querying Live Guardium Data with Cognos (Without the CSV Exports)<span style="font-family: inherit;"><i>by John Haldeman, Security Practice Lead</i></span><br />
<br />
This post is all about how to configure Cognos to query Guardium DAM data <u><b>directly on the appliance</b></u>. That is without exporting the data to CSV first and then loading it into a database that Cognos can access. How it works is by using a web service that accesses the Guardium REST API and then exposes the resulting Guardium data in an XML format that Cognos accepts. Cognos queries the web service and displays the data.<br />
<br />
<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi_TwA0TK2tjptEy59BsvBMPKUBpp2goSH_BdNUh-a98BDqeavBdaP-OhcS69QfxD5nXtnLhgYXl1fjlShUWrz2LqTS9D97QkT6fg_qYhiYFLNoscRRsn3U8gVdGcBNvio4NpiUNTox1lIr/s1600/GuardiumRESTtoCognosXMLDiagram.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi_TwA0TK2tjptEy59BsvBMPKUBpp2goSH_BdNUh-a98BDqeavBdaP-OhcS69QfxD5nXtnLhgYXl1fjlShUWrz2LqTS9D97QkT6fg_qYhiYFLNoscRRsn3U8gVdGcBNvio4NpiUNTox1lIr/s1600/GuardiumRESTtoCognosXMLDiagram.png" height="118" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Architecture for Querying Guardium Data Directly from Cognos</td></tr>
</tbody></table>
<br />
<a name='more'></a><br />
<br />
At the following link you will find code to a servlet that can be used to query a Guardium appliance (normally a central manager or standalone collector) and run any report on that appliance:<br />
<a href="https://github.com/johnhaldeman/guardiumReportWrapperForCognos">https://github.com/johnhaldeman/guardiumReportWrapperForCognos</a><br />
<br />
<h3>
Using the Web Service</h3>
Before we go into details on how to deploy and configure the web service, let's look at how to use it. Once deployed, the web service is designed to query the Guardium appliance and then expose the resulting JSON report data in an XML format acceptable to Cognos. When you access the web service you just specify the report name and the required parameters as HTTP GET or POST parameters. For example, the built in "<b>Sessions List</b>" report returns the list of database sessions that Guardium has captured and requires four parameters to run:<br />
<ul>
<li><b><span style="color: orange;">QUERY_FROM_DATE<span style="color: black;"> </span></span></b><span style="color: orange;"><span style="color: black;">(set to NOW -1 WEEK for example)</span></span><b><span style="color: orange;"><br /></span></b></li>
<li><b><span style="color: blue;">QUERY_TO_DATE<span style="color: black;"> </span></span></b><span style="color: blue;"><span style="color: black;">(set to NOW for example)</span></span><b><span style="color: blue;"><br /></span></b></li>
<li><b><span style="color: purple;">SHOW_ALIASES </span></b><span style="color: purple;"><span style="color: black;">(set to TRUE for example)</span></span></li>
<li><b><span style="color: #38761d;">REMOTE_SOURCE<span style="color: black;"> </span></span></b><span style="color: #38761d;"><span style="color: black;">(set to % for example to run locally)</span></span><b><span style="color: #38761d;"><br /></span></b></li>
</ul>
Being careful to escape the HTTP parameters, you would call the web service like this:<br />
http://<service_ip>:<service_port>/GuardiumJSONtoXML/xmlReport?reportName=<b>Sessions+List</b>&<span style="color: orange;"><b>QUERY_FROM_DATE</b></span>=NOW+-1+WEEK&<b><span style="color: blue;">QUERY_TO_DATE</span></b>=NOW&<span style="color: purple;"><b>SHOW_ALIASES</b></span>=TRUE&<span style="color: #38761d;"><b>REMOTE_SOURCE</b></span>=%25<br />
<br />
Note that this is a general implementation. You can run any report and if that report takes a different set of parameters, you just specify those as additional HTTP GET or POST parameters. The web service should be able to run any report in Guardium if you feed it the right parameter set. After execution, the servlet then returns the data in the general Cognos XML format described in the developerWorks article <a href="http://www.ibm.com/developerworks/data/library/cognos/infrastructure/databases/page476.html#N10074" target="_blank">here</a>.<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgmgC1Yz6BAUhyphenhyphen9MZmhcTqIz02-YmonUN3V_YXd1hfjj5EvZyTeC3OPzoRpMjIqCR_IaQ62taV6vk2Tnnd9cbc15z91xL241ZuWwmxHmKO2fPjEbNb2gLJCCczRavGesWmrXxn7zE175wDN/s1600/GuardiumDataAsXML.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgmgC1Yz6BAUhyphenhyphen9MZmhcTqIz02-YmonUN3V_YXd1hfjj5EvZyTeC3OPzoRpMjIqCR_IaQ62taV6vk2Tnnd9cbc15z91xL241ZuWwmxHmKO2fPjEbNb2gLJCCczRavGesWmrXxn7zE175wDN/s1600/GuardiumDataAsXML.png" height="347" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Example execution and results of the "Sessions List" report using the web service</td></tr>
</tbody></table>
<br />
Using the same developerWorks article, you then <a href="http://www.ibm.com/developerworks/data/library/cognos/infrastructure/databases/page476.html#N1014F">configure a Cognos XML datasource</a> and perform some minor data modeling using the Cognos Framework Manager (starting at<a href="http://www.ibm.com/developerworks/data/library/cognos/infrastructure/databases/page476.html#N10092" target="_blank"> step 10 here</a>). You can then make Cognos aware of the same report parameters we talked about earlier (ie: QUERY_FROM_DATE and the like) using the instructions at the <a href="http://www-01.ibm.com/support/docview.wss?uid=swg21335504" target="_blank">support document here</a>.<br />
<br />
The end result is Cognos requesting the required parameters on report execution, executing the report, and then displaying the data in Cognos without having to perform and data export from Guardium.<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgb0lBiuT4NoA_0H4SWe0m_IVt7Ha2TvuzACuLBfuAnXmSnpPaxJG0BI7GykL51vXIzPNnzxfCLwR5GF3Es2Ik7Z3Howf1Y-pFkQONRlUPnDzIueSsr20LsZ_YQML0kRUGFgKm0Mg7IcKCk/s1600/CognosAskingForReportParameters.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgb0lBiuT4NoA_0H4SWe0m_IVt7Ha2TvuzACuLBfuAnXmSnpPaxJG0BI7GykL51vXIzPNnzxfCLwR5GF3Es2Ik7Z3Howf1Y-pFkQONRlUPnDzIueSsr20LsZ_YQML0kRUGFgKm0Mg7IcKCk/s1600/CognosAskingForReportParameters.png" height="400" width="318" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Cognos Requesting Guardium Report Parameters</td></tr>
</tbody></table>
<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgnynooYfBExOcc9D4zO2ZL_psXkJKNChQ1kQHhXQZBY_bw57v1WOVyiGySpDnAv_ajRUfrmnGb1OnWmK-26hTcZL_DujHTjeFYAY1mRVpHKrDMZzNgP7SJ1GkOI53Ffk0XvkuQ8XEjSdXb/s1600/LiveGuardiumDataInCognos.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgnynooYfBExOcc9D4zO2ZL_psXkJKNChQ1kQHhXQZBY_bw57v1WOVyiGySpDnAv_ajRUfrmnGb1OnWmK-26hTcZL_DujHTjeFYAY1mRVpHKrDMZzNgP7SJ1GkOI53Ffk0XvkuQ8XEjSdXb/s1600/LiveGuardiumDataInCognos.png" height="347" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Sessions List report running in Cognos - Retrieving live Guardium data</td></tr>
</tbody></table>
<br />
At this point you can use Cognos' other capabilities to full advantage like developing better report parameter pages that assist users in entering appropriate data for Guardium parameters, and creating graphs and other visualizations.<br />
<h3>
Configuring the Web Service</h3>
Once compiled, you can deploy the servlet to your favorite application server. A natural place might be the Tomcat or WebSphere instance that your Cognos instance runs on, but it could be anywhere. Then, before you can use the web service, you need to modify the servlet's deployment descriptor (ie: the web.xml file) where you specify some REST API parameters that you will need in order to run the REST calls on the Guardium appliance. This includes the REST API client secret, a GUI username, and password. For details on how to register a REST client and create a client secret, take a look at the <a href="http://www.ibm.com/developerworks/data/library/techarticle/dm-1404guardrestapi/index.html#N1023B" target="_blank">developerWorks article</a> on the REST API. You can modify the servlet context parameters already included in the <a href="https://github.com/johnhaldeman/guardiumReportWrapperForCognos/blob/master/WebContent/WEB-INF/web.xml" target="_blank">sample web.xml</a> file in the github repository.<br />
<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjLchzjsh4xXW0qB-5pz3GV8RAuONKU2T8XM_pso5uWuJprbqpQqlDwq8Tr9t_arc2Rt8IVTaGy17UeOF9T4jQFUYZIV0IdXQ-iYWyNRsD-7bU4etZowYXLI4oXI_37ryyP1aRSMwmsqnrg/s1600/LabEnvironmentWebXML.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjLchzjsh4xXW0qB-5pz3GV8RAuONKU2T8XM_pso5uWuJprbqpQqlDwq8Tr9t_arc2Rt8IVTaGy17UeOF9T4jQFUYZIV0IdXQ-iYWyNRsD-7bU4etZowYXLI4oXI_37ryyP1aRSMwmsqnrg/s1600/LabEnvironmentWebXML.png" height="320" width="273" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">The web.xml file with the context parameters filled in for our lab environment</td></tr>
</tbody></table>
<br />
<h3>
Some Performance and Security Considerations</h3>
I will end this post with some notes and caveats. By far the most powerful and flexible method for using Guardium data outside of the Guardium enviornment is to export the data to CSV and then loading it into a database. Many customers do this and it works quite well. The discussion above should bare in mind the implications to the flexibility of the data you are querying, particularly when it comes to writing custom queries in Cognos on top of these data sources. The best way to use this method as is a alternative view on reports that are already built in Guardium, rather than a new datasource that you should build joins an complex queries on top of. For best results, do the report building in Guardium and just the viewing in Cognos. This helps push the computation down to where the data is.<br />
<br />
The other consideration that must be made is around security. The servlet described in this post allows anyone with access to that servlet on the network to query Guardium data - with no authentication. There are various ways to restrict access which I might explore in other posts. If you have any specific questions or a need to implement this in a production environment, please feel free to contact me at john.haldeman[AT]infoinsightsllc.com.<br />
<br />
<br />Information Insightshttp://www.blogger.com/profile/01560037005312811863noreply@blogger.com0tag:blogger.com,1999:blog-132420452883280664.post-80151712370996285702015-03-20T20:00:00.000-07:002015-03-23T06:34:58.793-07:00Adding ISPIM Session Recording Information to Guardium DAM to Gain Additional Information on Local Sessions<span style="font-family: inherit;"><i>by John Haldeman, Security Practice Lead</i></span><br />
<br />
One of the things that Guardium Database Activity Monitoring does best is monitor privileged users such as a DBA accessing a database. That being said, there are some situations where additional information can be brought in from other sources to provide even more information on the nature of the access. This post is about pulling in additional identity and session recording information from IBM Security Privileged Identity Manager to provide additional context for a database administrator's session.<br />
<a name='more'></a><br />
Take the following report in Guardium:<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh4M0sZvMUXU207MZZbNeWiIUu4KAA6__4hwfcJR_cNQhZnSkIGhbHE4rNdHRPyz14jCag4tYXaJEVJ4X5l354LDL5nOkeQNFdr9tOmTf5vryhgeGrkOUtVeNZOAaIyfDO1OIhfK1q8nyqr/s1600/SensitiveObjectAccessReport.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh4M0sZvMUXU207MZZbNeWiIUu4KAA6__4hwfcJR_cNQhZnSkIGhbHE4rNdHRPyz14jCag4tYXaJEVJ4X5l354LDL5nOkeQNFdr9tOmTf5vryhgeGrkOUtVeNZOAaIyfDO1OIhfK1q8nyqr/s1600/SensitiveObjectAccessReport.png" height="131" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">A Report in Guardium DAM showing Sensitive Object Access by Administrative Users</td></tr>
</tbody></table>
Both rows show administrative accounts (SYS and SYSTEM) accessing sensitive data (a table called HR.EMPLOYEES). The first row shows exactly who accessed what sensitive object and how they did it. It is easy to look at the information in the OS User column and know it is likely John Haldeman that performed the access. Failing that, it being a remote connection from 172.16.20.65 could also be used to help identify who executed the query by looking at who owned that IP during that time period.<br />
<br />
The second row in the report illustrates a challenge. The SYS user is a default database account, ORACLE is a default operating system user for Oracle environments, and the access is local. It is very difficult to determine who ran that query. Depending on the database environment, sometimes the UID chain can be used to pick up the user information we are looking for. UID chaining allows Guardium to identify the user chain that occurred before connection to the database in a local session - tracking the execution of switch user (su) commands in UNIX and Linux environments. This would help us identify the user accessing the sensitive table as long as the original account that connected to the database's OS was not some kind of shared account...<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjWsusHkHAbMYaJckTFRbzaPtda71D2uiBzLCuk-ZC2KbgIBl3hRWCMUokAKTtUrsXRGiPRMQJriw8Q_1I02M6JvQKz46dbXdUgmoxsUV8oWO0uI4855PxAcuovnvAVY-Xqbl-qqEsfiDz3/s1600/UIDChainExample.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjWsusHkHAbMYaJckTFRbzaPtda71D2uiBzLCuk-ZC2KbgIBl3hRWCMUokAKTtUrsXRGiPRMQJriw8Q_1I02M6JvQKz46dbXdUgmoxsUV8oWO0uI4855PxAcuovnvAVY-Xqbl-qqEsfiDz3/s1600/UIDChainExample.png" height="169" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">A Session Report in Guardium DAM showing UID Chaining</td></tr>
</tbody></table>
Unfortunately the account is called "shared_dba_1". The identity of the person accessing the database is effectively hidden. At this point you might throw your hands up and suggest that perhaps not knowing the end user identity is a inevitable when your administrative users use shared credentials.<br />
<br />
This would indeed be the case if those shared credentials were not managed by a privileged identity management system like IBM Security Privilege Identity Management (ISPIM). ISPIM manages shared credentials checking them out and in of a credential vault when administrators need them. The passwords can be changed on every check in and, if configured correctly, administrators need not even know the credential at all - having the system log in automatically for the administrator. ISPIM logs all of the check in and check out events for the shared credentials and attaches some very useful information for auditing during that process.<br />
<br />
In our example above, the shared_dba_1 credential was checked out just a few minutes before the SQL statement was run, and the following information was captured:<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhtFMIAax_mx2_UOjJXaNKltRM_UW0AnS9nAHVBAiypUN4UwgKbYyb95OrMit8xH4AjeeDOkYBFoBFEPxdOS7_AoBbpe-WQV92-deSomyYLmj_oKVFyqc0iKhPrzhSqvIolUrBhKIsFTbto/s1600/ISPIMRecordingMetadata.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhtFMIAax_mx2_UOjJXaNKltRM_UW0AnS9nAHVBAiypUN4UwgKbYyb95OrMit8xH4AjeeDOkYBFoBFEPxdOS7_AoBbpe-WQV92-deSomyYLmj_oKVFyqc0iKhPrzhSqvIolUrBhKIsFTbto/s1600/ISPIMRecordingMetadata.png" height="400" width="243" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Recording Metadata in ISPIM Showing the End User Identification Information We're Looking For</td></tr>
</tbody></table>
So, now we know who used that local shared operating system credential, which means we know who ran the SQL statement we are interested in. But, we have to check a separate system and line up credentials and timestamps to see that information. Luckily ISPIM keeps all of this session recording information in a DB2 LUW Database, and DB2 LUW data can be imported into Guardium using the enterprise integrator functions, so we can have it all in one interface.<br />
<br />
First create a new DB2 LUW Datasource in Tools --> Config & Control --> Datasource Definitions. Enter in the information you need to access the PSRDB database. Unless you own the ISPIM environment you might need some help getting an account and the connection information. Here is an example:<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjoDJlvwnq0oNn6DQ3ydwmV_cB8pWEKZ-sEkLYkA0D45Crm84PbLyGFr4rWdZPTgNV5m5KKug2dI-iTHR5cTwzBsC0SrETF2evcUU8K7wERTd6PVlMmYVRusjWw6zm-I3WrSRS242OK9t3E/s1600/piminstDatasource.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjoDJlvwnq0oNn6DQ3ydwmV_cB8pWEKZ-sEkLYkA0D45Crm84PbLyGFr4rWdZPTgNV5m5KKug2dI-iTHR5cTwzBsC0SrETF2evcUU8K7wERTd6PVlMmYVRusjWw6zm-I3WrSRS242OK9t3E/s1600/piminstDatasource.png" height="400" width="338" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Guardium Datasource Configured to Connect to ISPIM Recording Database</td></tr>
</tbody></table>
Next, import a table definition from DB2 in Tools --> Report Building --> Custom Table Builder --> Upload Definition. Provide the following SQL statement to base the definition on:<br />
<blockquote class="tr_bq">
SELECT r.userid, r.applicationuserid, r.localuserid, r.processname,<br />
r.applicationname, r.localhost, r.remotehost, b.data, b.time<br />
FROM piminst.bookmark b, piminst.recording r<br />
WHERE b.recordingid = r.recordingid<br />
ORDER BY b.time</blockquote>
The resulting table definition looks like the following. Optionally specify the data types to help with group selection later:<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjho1e3pUx-BI6JhwTJVyyLJ-gKaNxWAUhN7F5w9RRaTooGd5dr0JdEYirvAe30OyPj7c2FHXYCZ1fPKoRSw8iMbyU0HA-m-FBtan1bgV8C5ED5kLWJvUm7YyW9JWR1wVjMoQBKloiLQ23M/s1600/ISPIMCustomTableinGuardium.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjho1e3pUx-BI6JhwTJVyyLJ-gKaNxWAUhN7F5w9RRaTooGd5dr0JdEYirvAe30OyPj7c2FHXYCZ1fPKoRSw8iMbyU0HA-m-FBtan1bgV8C5ED5kLWJvUm7YyW9JWR1wVjMoQBKloiLQ23M/s1600/ISPIMCustomTableinGuardium.png" height="291" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">ISPIM Recording Data Table Definition in Guardium</td></tr>
</tbody></table>
Finally upload the data, create a custom domain, and then a create a custom query on that imported information. You can also create a schedule to import the data regularly. In the end, the recording data comes into Guardium looking like this:<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi9Dt0JHKIgfQhAzWzAPyoxzhglNPbXH3V3HqU98B5-d8mODmsaImCaQKVejtzP-dfPAOTyt-XvfypzgHx2RMziN6h85OkbWOdjYp-2WDZVWhsw8uq4W3AIowGnWGagneYJdSUh_2B-Q0fp/s1600/ISPIMDataInGuardium.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi9Dt0JHKIgfQhAzWzAPyoxzhglNPbXH3V3HqU98B5-d8mODmsaImCaQKVejtzP-dfPAOTyt-XvfypzgHx2RMziN6h85OkbWOdjYp-2WDZVWhsw8uq4W3AIowGnWGagneYJdSUh_2B-Q0fp/s1600/ISPIMDataInGuardium.png" height="270" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Putty Session Data in Guardium</td></tr>
</tbody></table>
Note that more than just the identity information on who was using shared_dba_1 is imported. Additionally, the commands executed through putty are also imported. It shows the SELECT statement that originally started our investigation (red underline), but having the rest of the session's context shows that the query results were spooled to a file (green underline), and then finally SCP'd to another server (blue underline). This incident could be more serious than we first thought!<br />
<br />
ISPIM actually recorded much more including the results of the commands executed in the putty session from start to finish. To illustrate the recording capability, you can view a recording of that session sped up to four times the normal speed at the following video:<br />
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="" class="YOUTUBE-iframe-video" data-thumbnail-src="https://i.ytimg.com/vi/PUa5_qHithQ/0.jpg" frameborder="0" height="266" src="http://www.youtube.com/embed/PUa5_qHithQ?feature=player_embedded" width="320"></iframe></div>
<br />
<br />
You might be asking yourself where the value-add of Guardium is to this kind of monitoring if the SELECT statement we were interested in was also detected by ISPIM monitoring. The answer comes from the original screenshot in this blog post. A JDBC tool was used to create the first administrative session and unfortunately ISPIM does not record the sessions through those tools. Additionally, Guardium would also be invaluable in proving to your auditors that when shared credentials are used, they are used only in contexts where session recording has occurred. In this way, the solutions complement each other.<br />
<br />Information Insightshttp://www.blogger.com/profile/01560037005312811863noreply@blogger.com0tag:blogger.com,1999:blog-132420452883280664.post-11250517208503136382014-04-17T13:52:00.001-07:002015-03-20T17:08:39.163-07:00Sending Data in Guardium to an External Database Using the External Feed<span style="font-family: inherit;"><i>by John Haldeman, Security Practice Lead</i></span><br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">Guardium has the capabilities to send data to external databases. Traditionally this is done through CSV exports of the data where an audit process are set up to create CSV files which are moved off the appliance using the results export functionality of the Administration Console.</span><br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">There was another method of exporting data that, until recently, was not available for most customers to use directly. This method is where Guardium creates a connection to an external database and inserts the results from a report directly into that database. External feeds work by mapping column names from the Guardium database to another database. This used to be a manual process of accessing the Guardium MySQL database directly and creating that mapping. That process required root access, which means you needed support to help you do it.</span><br />
<span style="font-family: inherit;"></span><br />
<a name='more'></a><span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">In Guardium V9.1 and above, this mapping can now be done without support or rooting via a simple grdAPI call. To keep things simple they assume the column names in the report you are exporting to your external database are going to be the same as the column names internal to Guardium. So, you don't have to build a mapping. This blog post explains how to create these external feeds.</span><br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">At the end of this post I will discuss the downsides of this function and why you may still want to use CSV exports instead. </span><br />
<span style="font-family: inherit;"><br /></span>
<br />
<h3>
</h3>
<h3>
<span style="font-family: inherit;">Step 1: Build the Report You Want to Export</span></h3>
<span style="font-family: inherit;">The first step is to build a report that has all of the data in it that you wish to send to the external database. This can be any report in Guardium. In this example I am going to use the Oracle entitlement report called "<span class="Normal">ORA Roles Granted".</span></span><span style="font-family: inherit;"><span class="Normal"> <table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhq8voFlJkn9jBCzyJGt4HRqzOD6PhRZzS6XP2TxVy9xH2YYKYpGsqxORClWbAo6m2YjIUt-L3Rn9N5jdm81M_gvZhpgGXPbj6aHhH9wlIbBb8oagGkS76laqbVJbBtrYc2du74HT2zrb7A/s1600/ReportToExport.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhq8voFlJkn9jBCzyJGt4HRqzOD6PhRZzS6XP2TxVy9xH2YYKYpGsqxORClWbAo6m2YjIUt-L3Rn9N5jdm81M_gvZhpgGXPbj6aHhH9wlIbBb8oagGkS76laqbVJbBtrYc2du74HT2zrb7A/s1600/ReportToExport.png" height="408" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">The report we plan to export</td></tr>
</tbody></table>
</span></span><br />
<h2>
<span style="font-family: inherit;">
<b> </b></span></h2>
<h3>
</h3>
<h3>
<span style="font-family: inherit;">Step 2: Create the Table Mapping Definition in Guardium</span></h3>
<span style="font-family: inherit;">To do this, all you need to do is execute the following grdAPI call from the CLI:</span><br />
<blockquote class="tr_bq">
<span style="font-family: inherit;">grdapi create_ef_mapping reportName="ORA Roles Granted"
</span></blockquote>
<span style="font-family: inherit;">Replace "ORA Roles Granted" with the report you are interested in exporting. Again, this is only going to work with newer versions of Guardium (V9.1+). </span><br />
<h2>
<span style="font-family: inherit;">
</span></h2>
<h3>
<span style="font-family: inherit;">
Step 3: Create the Table in the Destination Database</span></h3>
<span style="font-family: inherit;">The next step is to create a table in the destination database. When you created the mapping in Step 2, Guardium conveniently created you a CREATE TABLE template that you can use for this. To get a hold of that template, start the fileserver on the appliance where you ran the mapping grdAPI mapping command. Access the fileserver with your browser and click on the "Sqlguard logs" section. The file containing the CREATE TABLE template should be prefixed with "ef_sample" and end with the report name. In our example it's called "ef_sample_ORA_ROLES_GRANTED.sql".</span><br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><span style="font-family: inherit;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhvRhzrVnD9XiZFCnlj0Am96MZkZQ45VH8XfVduH1TDsILT_4LMxm2YCajk0S5I5NTY7nM1r7jmc7y7AkoYaKAoDysGgc-e-3D3oA7kjVIfdcuocXmysc75Ie-f7j2fzN69HgQRx9MWvwkv/s1600/ORA_ROLES_GRANTED_TEMPLATE.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhvRhzrVnD9XiZFCnlj0Am96MZkZQ45VH8XfVduH1TDsILT_4LMxm2YCajk0S5I5NTY7nM1r7jmc7y7AkoYaKAoDysGgc-e-3D3oA7kjVIfdcuocXmysc75Ie-f7j2fzN69HgQRx9MWvwkv/s1600/ORA_ROLES_GRANTED_TEMPLATE.png" height="66" width="400" /></a></span></td></tr>
<tr><td class="tr-caption" style="text-align: center;"><span style="font-family: inherit;">The template SQL file as shown in the log file explorer</span></td></tr>
</tbody></table>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">When viewed, the file contains the following CREATE TABLE statement:</span><br />
<blockquote class="tr_bq">
<span style="font-family: inherit;">create table ORA_ROLES_GRANTED(</span><br />
<span style="font-family: inherit;">ORA_ROLES_GRANTED_ID int not null auto-increment </span><br />
<span style="font-family: inherit;">,GRANTEE varchar(255) </span><br />
<span style="font-family: inherit;">,USER_OR_ROLE varchar(255) </span><br />
<span style="font-family: inherit;">,GRANTED_ROLE varchar(255) </span><br />
<span style="font-family: inherit;">,DATASOURCE_DETAILS varchar(255) </span><br />
<span style="font-family: inherit;">,SQLGUARD_TIMESTAMP Date </span><br />
<span style="font-family: inherit;"> ); </span></blockquote>
<span style="font-family: inherit;">The "int not null auto-increment" designation seems to suggest this is a MySQL statement. If you try and run this command in other databases, it may fail. This is true if your destination is Oracle which is what we'll use in our example. The important thing here is the column names of all of the columns except the first column, which Guardium assumes is an automatically generated ID. You can change the create table statement in any way you like as long as you keep all of the column names the same for everything except the first column.</span><br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">In fact you don't technically need the first column at all, so let's remove it and create the table in our destination Oracle database: </span><br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><span style="font-family: inherit;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEghejHlc49noEOWi0OdhGzkXkt6DM_Fi5lzd8VZWz2tSHHlRLIDs7N3Khy5O316ivF8aK2ZYwmJHeVyGw0VsRK34wFyYnmIkU8s-575bVdk6bJWpabmmnuHCKvpwXmH9_p183W0Kp1oDLsE/s1600/CreateTableRun.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEghejHlc49noEOWi0OdhGzkXkt6DM_Fi5lzd8VZWz2tSHHlRLIDs7N3Khy5O316ivF8aK2ZYwmJHeVyGw0VsRK34wFyYnmIkU8s-575bVdk6bJWpabmmnuHCKvpwXmH9_p183W0Kp1oDLsE/s1600/CreateTableRun.png" height="218" width="400" /></a></span></td></tr>
<tr><td class="tr-caption" style="text-align: center;"><span style="font-family: inherit;">Creating the Destination Table in an Oracle Database</span></td></tr>
</tbody></table>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">Be sure that you create the table in the schema of the service account that you are using to connect to the external database from Guardium. So, if the username you use in your Guardium datasource is "GUARD", you would create a table called GUARD.ORA_ROLES_GRANTED. Also, make sure your server account has the ability to read and write data to the table.</span><br />
<h2>
<span style="font-family: inherit;">
</span></h2>
<h3>
<span style="font-family: inherit;">
Step 4: Create an Audit Process with an External Feed and Datasource</span></h3>
<span style="font-family: inherit;">The next step is to create an Audit Process with an external feed and attach the datasource to that feed. To do that, create an audit process as you would normally and specify no receivers. Add an audit task and choose the task type of "External Feed". Pick the feed parameters of the mapping you created previously and add a datasource to that audit task</span><br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><span style="font-family: inherit;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgCQ4oTsefnyHc3VsgCGyO0BIzttgImNukpyw5oqSz_H_MwRrCwhL4M2CrR_xMWdoJYQQPdE94TEqGgmChVRBtloHAD3K-GOVjVwpEG3CVGyvSBX-enFrJ1gVqSLdiU5HIFa_W8YH06T22l/s1600/ExternalFeedDefinition.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgCQ4oTsefnyHc3VsgCGyO0BIzttgImNukpyw5oqSz_H_MwRrCwhL4M2CrR_xMWdoJYQQPdE94TEqGgmChVRBtloHAD3K-GOVjVwpEG3CVGyvSBX-enFrJ1gVqSLdiU5HIFa_W8YH06T22l/s1600/ExternalFeedDefinition.png" height="266" width="400" /></a></span></td></tr>
<tr><td class="tr-caption" style="text-align: center;"><span style="font-family: inherit;">External Feed definition in a Guardium Audit Process</span></td></tr>
</tbody></table>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">Now the only thing left to do is run the audit process. Click run once now or schedule it to occur on a regular basis. When it runs, the audit process will report on how many rows were inserted into the remote source.</span><br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><span style="font-family: inherit;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh86-fmH-J12gFR82KrF5w6PTqd0ICfc8vynyoQhBXd8wlYb0KiLsjDJYlNwgJ9uVbrxYZWT5r8oec5vJgD7zCGDlQEVsnstOhRhAGeWvTM6VSFCsQ4ts6xHjQtJ-51z00R_yHDil7OuIQB/s1600/FeedExportResults.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh86-fmH-J12gFR82KrF5w6PTqd0ICfc8vynyoQhBXd8wlYb0KiLsjDJYlNwgJ9uVbrxYZWT5r8oec5vJgD7zCGDlQEVsnstOhRhAGeWvTM6VSFCsQ4ts6xHjQtJ-51z00R_yHDil7OuIQB/s1600/FeedExportResults.png" height="212" width="400" /></a></span></td></tr>
<tr><td class="tr-caption" style="text-align: center;"><span style="font-family: inherit;">Results from Publishing to the External Feed</span></td></tr>
</tbody></table>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">After that, the data should be available in the database external to Guardium:</span><br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><span style="font-family: inherit;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjXOaMj_6EDZVuU7Kn1Y6lPqkDeh-LvzIB5kTII3CXaFXP9OOb4yPmoy-c0rysGxQQ5jh7oQl-HYCU77vqyCAKs17nZMRUNz7Nl7yasFVygaNXMgtvpPlFoMGXXhRj4vQmeqnXwZi5nPz04/s1600/DataInOracle.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjXOaMj_6EDZVuU7Kn1Y6lPqkDeh-LvzIB5kTII3CXaFXP9OOb4yPmoy-c0rysGxQQ5jh7oQl-HYCU77vqyCAKs17nZMRUNz7Nl7yasFVygaNXMgtvpPlFoMGXXhRj4vQmeqnXwZi5nPz04/s1600/DataInOracle.png" height="217" width="400" /></a></span></td></tr>
<tr><td class="tr-caption" style="text-align: center;"><span style="font-family: inherit;">The Guardium report data in Oracle</span></td></tr>
</tbody></table>
<h2>
<span style="font-family: inherit;">
</span></h2>
<h3>
<span style="font-family: inherit;">
Problems with the External Feed</span></h3>
<span style="font-family: inherit;">The advantages of the external feed are immediately apparent. You can get your data into another database without having to use CSV files as intermediaries. The problem with this approach (other than the data being outside Guardium and thus in an editable environment), is that if you want to move large amounts of data, you may run into performance problems. The reason is that Guardium is using a JDBC connection and writing INSERT statements to populate the destination table. This traditionally is not a recipe for fast bulk-loading of data. A much better approach for the loading of large amounts of data is to take advantage of database loader utilities that are optimized for writing as much data as quickly as possible,</span><br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">Additionally, because you are using Guardium to move the data, you are limited by Guardium's capabilities for data movement. If you export data to CSV files instead, you have the option of using ETL tools to manage and modify the data before you load it into the destination environment. </span><br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">As such, the external feed makes sense for smaller data sets, but may not make sense when you plan on exporting large amounts of data out of Guardium.</span><br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;"><br /></span>Information Insightshttp://www.blogger.com/profile/01560037005312811863noreply@blogger.com0tag:blogger.com,1999:blog-132420452883280664.post-55539402517944733792014-02-28T06:45:00.001-08:002014-02-28T06:45:50.692-08:00Installing Optim Manager on CentOS<div class="MsoNormal">
<i>by Matt Simons, Practice Lead</i><br />
<i><br /></i>
I was setting up a new CentOS machine the other day in our lab to use as an Optim 9.1 Server (now, CentOS is not an officially supported operating system for running the Optim Server components - its true - but we use it in our lab environments since its the closest thing to Red Hat Enterprise Linux) and I hit upon an issue. See, all of the components (Runtime Services, WebSphere, Optim Manager, Optim Connection Manager) work fine <u>except</u> for the process of installing the WAS-CE instance as a
daemon (I hate having to remember to start things every time).</div>
<a name='more'></a><br />
<div class="MsoNormal">
If you follow the documentation (<span style="font-family: Courier New, Courier, monospace;">install_config_optim.html</span>), it tells you to execute a script (<span style="font-family: Courier New, Courier, monospace;">setup-mgmtserver-as-daemon.sh</span>, located in <span style="font-family: Courier New, Courier, monospace;">/opt/IBM/InfoSphere/Optim/shared/WebSphere/AppServerCommunityEdition/bin</span> by default) which will generate a new file (<span style="font-family: Courier New, Courier, monospace;">optimmgmtserver</span>) that is to be copied to the appropriate startup directories and then hooked up to the init processing (by building symbolic links or using chkconfig depending on the platform). The problem is that on a CentOS machine, executing the <span style="font-family: Courier New, Courier, monospace;">setup-mgmtserver</span> script doesn't do anything. And doesn't give you any reason why. So what's the deal?</div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
If you examine the script, you will see around line 359 that if the system is a Linux host (which it determines by running <span style="font-family: Courier New, Courier, monospace;">uname</span>) it attempts to determine the flavor of Linux by executing <span style="font-family: Courier New, Courier, monospace;">lsb_release -d</span> and searching for the 2nd word in the result (<span style="font-family: Courier New, Courier, monospace;">awk '{ print $2 }'</span>). It then uses the results of that awk to know what version of the startup script to generate. </div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
OK, long explanation, so here's the meat of it. The only valid responses to the result of the awk (that is, responses that will lead to actually generating the script) are <i>Red</i>, <i>AIX</i>, <i>SunOS</i>, and <i>Unbuntu</i>. If <span style="font-family: Courier New, Courier, monospace;">awk '{ print $2 }'</span> doesn't give you one of those, no script will be generated. So how to get around this? Just add the following block:</div>
<blockquote class="tr_bq">
<span style="font-family: Courier New, Courier, monospace;">elif [ "$FLAVOR" = "CentOS" ]</span><br />
<span style="font-family: Courier New, Courier, monospace;">then</span><br />
<span style="font-family: Courier New, Courier, monospace;"> createRedHatScript</span></blockquote>
<div class="MsoNormal">
<o:p></o:p></div>
<div class="MsoNormal">
<o:p></o:p></div>
<div class="MsoNormal">
<o:p></o:p></div>
<div class="MsoNormal">
into the section that chooses which script to generate (the very end of the whole <span style="font-family: Courier New, Courier, monospace;">setup-mgmtserver</span> file). Since CentOS is 100% binary compatible to RedHat, the RHEL version of the optimmgmtserver script is the most appropriate choice.</div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
Once this block is added to the <span style="font-family: Courier New, Courier, monospace;">$FLAVOR</span> evaluation, you can run the setup-mgmtserver file and continue following the directions as if this was any other Red Hat host (copying to /etc/init.d, running chkconfig, etc).</div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<b>Please note! (and remember!) that CentOS is not officially supported as an Optim Server OS, so this is not intended to circumvent that requirement. However, if you need a new lab or sandbox environment and don't have a RHEL subscription, this should help you cross the last hurdle to a fully functioning Optim Server.</b><br />
<b><br /></b>
Enjoy!</div>
<div class="MsoNormal">
<o:p></o:p></div>
Information Insightshttp://www.blogger.com/profile/01560037005312811863noreply@blogger.com0tag:blogger.com,1999:blog-132420452883280664.post-32533355053220825122014-01-02T09:26:00.005-08:002014-01-02T09:26:57.902-08:00Type 1 Guardium STAP for Guardium/Vormetric Data Encryption<i>by John Haldeman, Security Practice Lead</i><br />
<br />
Today we open sourced a custom STAP for integrating Guardium Database Activity Monitoring and Guardium/Vormetric Data Encryption. This custom STAP can be found at the following GitHub repository:<br />
<a href="https://github.com/johnhaldeman/GuardDETap">https://github.com/johnhaldeman/GuardDETap</a><br />
<br />
Guardium Database Activity Monitoring (Guardium DAM) and Guardium/Vormetric Data Encryption (Guardium/Vormetric DE) do a great job of working together to help audit and control the access to sensitive data in databases. This custom STAP receives syslog events sent from Guardium/Vormetric DE agents, translates those messages into the Guardium Universal Feed protocol, and transmits the data to a Guardium DAM collector for reporting and alerting.<br />
<br />
<a name='more'></a><br />
It is fairly well known at this point that in order to ensure that all administrative user access to sensitive data is controlled and audited, you need both Guardium DAM and Guardium/Vormetric DE. For auditing, the Guardium DAM product monitors database client/server communication but does not provide detailed information on the access of files outside of the database engine. Guardium/Vormetric DE monitors direct access to the files, but has little visibility into the transactions being run through the database engine. Both products are needed to provide a complete picture of administrative access.<br />
<br />
The same goes for prevention. Guardium/Vormetric DE prevents data breaches by system administrators by encrypting the data at rest while Guardium DAM prevents data breaches by DBAs through the database engine by preventing SQL statements from executing when those administrative users access sensitive data.<br />
<br />
The GuardDETap custom STAP that we open sourced today processes the messages being generated by Guardium/Vormetric DE agents and transmits it to a Guardium collector for reporting. In this way, reporting on administrative access to database resources can be managed and reported on in a single system. Alerts can then be sent from Guardium DAM and incidents can be managed for both file level access and access through the database engine.<br />
<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhfHGw2e_erVCXim_ZC6p-0GjvNK1fsnPh2WqjTqnohPTN3ur6fEPjSxk9_RYlSH4MdvHGqZ-G0OjHUmC6KzPEqpENG81eFGptipQWUy1PC-iS7h7tPy9Gb9S6E8iAKe2RIApo3XKeztdFy/s1600/GuardDETapArchitecture.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" height="425" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhfHGw2e_erVCXim_ZC6p-0GjvNK1fsnPh2WqjTqnohPTN3ur6fEPjSxk9_RYlSH4MdvHGqZ-G0OjHUmC6KzPEqpENG81eFGptipQWUy1PC-iS7h7tPy9Gb9S6E8iAKe2RIApo3XKeztdFy/s640/GuardDETapArchitecture.png" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">How the GuardDETap fits into an environment that has Guaridum DAM and Guardium/Vormetric DE Installed</td></tr>
</tbody></table>
<br />
A good alternative approach to using this custom STAP would be to send Syslog messages from the Guardium/Vormetric DE agents and Syslog messages from Guardium DAM to a SIEM (eg: QRadar) for consolidated reporting. This is a good approach. The GuardDETap is more for environments where Guardium/Vormetric DE is installed and Guardium DAM is installed but there is no SIEM, or if Guardium is the preferred repository for file-level event auditing for the customer.<br />
<br />
On a side note, much of the code in this new STAP was adapted from the mongoTap project.
If you don't know already, MongoDB is now fully supported by the base
Guardium product, so you no longer have to use a custom STAP for that
database type.<br />
<br />
<br />
<br />
<br />Information Insightshttp://www.blogger.com/profile/01560037005312811863noreply@blogger.com0tag:blogger.com,1999:blog-132420452883280664.post-8164810587625384232013-11-17T08:42:00.002-08:002013-11-17T08:46:19.954-08:00Three Basic Reports in Guardium That Always Seem to Be Reused<i>by John Haldeman, Security Practice Lead</i><br />
<br />
Guardium has extensive reporting capabilities. You can build a variety of reports to view the data in a lot of different ways. That being said, after working with Guardium for some time you may notice that there are a few reports that get reused over and over again as the basis for other reports. The columns in these reports hardly change. Instead the criteria are refined after they are cloned.<br />
<br />
I contend that there are really three report definitions in Guardium that can provide the basis for 80% of the reports that customers require. As such, I tend to create those base reports first so that I can reuse their definitions over and over again. If you are starting out in Guardium you might find these useful. If you have three base reports that you know work, you won't have to struggle building them from scratch which includes picking the correct main entity for the report and only including fields that make sense.<br />
<br />
<a name='more'></a><br />
<br />
All of these reports are for the "Access Tracking" domain. That is the set of tables in Guardium that track SQL statement execution. Guardium has lots of other domains as well (eg: the Exceptions Tracking domain which tracks database errors), but most of the reports customers care about are from Access Tracking.<br />
<br />
<h3>
<b>Basis Report 1: The Session Level Report</b></h3>
This is the first report I end up building is a report on session data. It normally comes first because this report can be very helpful in confirming you are receiving traffic from the STAPs. Here is what it looks like:<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh2EZw2CqpBxpPcurIloaFH15e9cYZAe1EMcduHdUS0bMxztJSWDHTuMD24PLeNHfCEHas2xsJsAt-Ila0tjm-W1DlNrahkLzcPU5F6DPW_tftXYCGpQQ-Htj2uXBXDKaOqTffbbNo8f8HQ/s1600/SessionLevelReportDef.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" height="236" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh2EZw2CqpBxpPcurIloaFH15e9cYZAe1EMcduHdUS0bMxztJSWDHTuMD24PLeNHfCEHas2xsJsAt-Ila0tjm-W1DlNrahkLzcPU5F6DPW_tftXYCGpQQ-Htj2uXBXDKaOqTffbbNo8f8HQ/s640/SessionLevelReportDef.png" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Definition for Session Level Report</td><td class="tr-caption" style="text-align: center;"></td><td class="tr-caption" style="text-align: center;"><br /></td><td class="tr-caption" style="text-align: center;"></td><td class="tr-caption" style="text-align: center;"><br /></td><td class="tr-caption" style="text-align: center;"></td><td class="tr-caption" style="text-align: center;"><br /></td><td class="tr-caption" style="text-align: center;"></td><td class="tr-caption" style="text-align: center;"><br /></td><td class="tr-caption" style="text-align: center;"><br /></td><td class="tr-caption" style="text-align: center;"><br /></td><td class="tr-caption" style="text-align: center;"><br /></td><td class="tr-caption" style="text-align: center;"><br /></td><td class="tr-caption" style="text-align: center;"><br /></td></tr>
</tbody></table>
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXQsuF6T5WEDNbsxzulgUJQQK-crsjBnPzM6GXDJF91AmtNEhc1NnyBSdYkU7aTZlE_GUn4jRcFubsyR42xZOj0NsNZB_oAHcVABRNoE09xrXD6Lrp1fycQmZO5fxbwoNtLDhUjEsQ2noK/s1600/SessionLevelReportOutput.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" height="106" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXQsuF6T5WEDNbsxzulgUJQQK-crsjBnPzM6GXDJF91AmtNEhc1NnyBSdYkU7aTZlE_GUn4jRcFubsyR42xZOj0NsNZB_oAHcVABRNoE09xrXD6Lrp1fycQmZO5fxbwoNtLDhUjEsQ2noK/s640/SessionLevelReportOutput.png" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Output of the Session Level Report</td></tr>
</tbody></table>
<br />
If you think about it, you can tie this back to logging levels. Guardium always logs session data no matter what policy you define. Session data logging ties to the "Sessions" main entity. That's the main entity for this first basis report. The rest of the basis reports are going to relate directly to a logging level and a main entity as well. It is no coincidence that I define three basis reports and that there are three levels of logging in Guardium. From here you would clone and define parameters on session level information. For example, you could create a report of all logins using application users that are not from application servers.<br />
<br />
<h3>
Basis Report 2: The Full SQL Report</h3>
The next basis report displays data at one of the finest grained levels of detail that Guardium provides. An example of where this could be used is for reporting on DBA activities.<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg5UfiW6EsaoUT0NAQEL-9tK_UJe4I0EQ4kMsCiWE6ESAbfIV7RCpE1bb7BDPgMPMXpUPBPIfxQECc-sy9tAuauGy70dOO04Jr4nWZGyLJUF0r0mRORGY0MJCWsEQqXua2bdD77OTZJmI_2/s1600/FullSQLReportDef.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" height="210" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg5UfiW6EsaoUT0NAQEL-9tK_UJe4I0EQ4kMsCiWE6ESAbfIV7RCpE1bb7BDPgMPMXpUPBPIfxQECc-sy9tAuauGy70dOO04Jr4nWZGyLJUF0r0mRORGY0MJCWsEQqXua2bdD77OTZJmI_2/s640/FullSQLReportDef.png" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Definition for Full SQL Report</td></tr>
</tbody></table>
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh9aIX0pBzfPCpXagC5AgOOnE_tqleraCRaeYDEn9jvOlwbdb5_Rbbp9n7LYUmM4o9_yPHWYOF1tMUzBTW_5b-u5A4iEQrpckxx87D3LxACY2mhGNYageeMT1YQsi5J9CFOYkHO0ZljqyuR/s1600/FullSQLReportOutput.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" height="278" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh9aIX0pBzfPCpXagC5AgOOnE_tqleraCRaeYDEn9jvOlwbdb5_Rbbp9n7LYUmM4o9_yPHWYOF1tMUzBTW_5b-u5A4iEQrpckxx87D3LxACY2mhGNYageeMT1YQsi5J9CFOYkHO0ZljqyuR/s640/FullSQLReportOutput.png" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Output for the Full SQL Report</td></tr>
</tbody></table>
The logging level that this report ties to is "Log Full Details". That is it will only be able to display data where you have a rule in your policy with the action of Log Full Details. The main entity that this report relates to is the Full SQL main entity. From here
you would clone and define parameters on any information to do with the activity. For
example, you could create a report of all DML performed by administrators on financial objects.<br />
<br />
<h3>
Basis Report 3: Object/Command Report</h3>
The final report that I reuse over and over again is that which shows the SQL Verb (or the command) executed against a specific database object (like a table). I use this quite often if Full SQL reports generate too much information to be useful or consumable, or if the requirement is to track application sessions (where logging Full SQL would be very expensive).<br />
<span id="goog_179125454"></span><span id="goog_179125455"></span><br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhqC9DXkME5BoOIo2O4UFJnSclTs15PlYxx5ZnPMP0l4Wv9kIVv-cnhGkaguDg4TQZIT9gvFcWcZLkPp95VfXjS2a3m_trx0CFhJLeHE3o4kO-BYms5MIznaTAZjwOp7BbG26MLzzhzTgU5/s1600/CommandObjectReportFormat.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" height="250" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhqC9DXkME5BoOIo2O4UFJnSclTs15PlYxx5ZnPMP0l4Wv9kIVv-cnhGkaguDg4TQZIT9gvFcWcZLkPp95VfXjS2a3m_trx0CFhJLeHE3o4kO-BYms5MIznaTAZjwOp7BbG26MLzzhzTgU5/s640/CommandObjectReportFormat.png" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Definition for Object/Command Report</td></tr>
</tbody></table>
<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgY10rBdZcYywla3v5Qh8ftobuVeHyX5tOdjL5TM6oPJuT-RWsFuzszDKcbfcPv-4xsEoTUYw5Pwjv4vks4PACfn0-Eeab9pF8b1yT98bUIBVassr3KJlOEjpn70q_3QGJBMopAaZ08W2Rg/s1600/CommandObjectReportOutput.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" height="96" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgY10rBdZcYywla3v5Qh8ftobuVeHyX5tOdjL5TM6oPJuT-RWsFuzszDKcbfcPv-4xsEoTUYw5Pwjv4vks4PACfn0-Eeab9pF8b1yT98bUIBVassr3KJlOEjpn70q_3QGJBMopAaZ08W2Rg/s640/CommandObjectReportOutput.png" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Output for Object/Command report</td></tr>
</tbody></table>
The logging level that this report ties to is construct logging. That is you would only be able to display data with this report where you have a rule in your
policy with the action of AUDIT ONLY for selective audit trails, or ALLOW/No Rule for non-selective audit trails. This logging level ties to a lot of possible main entities, but if you're going to build this particular report, the main entity would have to be OBJECT. From here
you would again clone and define appropriate filtering parameters. <br />
<br />
<h3>
Other Notable Reports</h3>
As mentioned earlier, I find that these reports, or ones very similar to them, account for about 80% of the reports that get used in Guardium. So, the question then becomes what about the other 20%? Here are a couple notable examples of reports that often get used but don't fit the three definitions outlined above:<br />
<ol>
<li>Reports on other domains: All of the reports above use the "Data Access" domain. Normally there is at least one report on database errors which applies to the Exceptions domain. Additionally, if you're using Guardium for other functions (entitlement reports, vulnerability assessments, CAS, etc.) you will probably build reports on the domains of those other functions</li>
<li>One User - One IP reports. This is often created to try and determine if there is widespread abuse of a particular database account. It shows how many IP addresses are associated with a particular database account. This is an example of a report that relates to the Data Access domain but does not fit the format of the three reports defined above</li>
</ol>
<br />
<br />
<br />
<br />
<br />
<br />Information Insightshttp://www.blogger.com/profile/01560037005312811863noreply@blogger.com0tag:blogger.com,1999:blog-132420452883280664.post-66428244066921894642013-04-16T15:41:00.001-07:002013-04-16T15:44:06.206-07:00Optim for Legacy (Non-Relational) Application Retirement Middleware Options<div>
<i>by Matthew Simons, ILMG Practice Lead</i><br />
<br />
When you’re helping your customer archive or retire data from mainframe data sources, you’ll need to make some informed choices during the sales process to determine which mix of products will address their needs properly. This isn’t always as straightforward as it seems, especially when Optim and the Mainframe are involved.</div>
<div>
<span class="Apple-tab-span" style="white-space: pre;"> </span> </div>
<div>
When accessing non-relational data on a z/OS platform using Optim Distributed (LUW), you must use a middleware layer on the mainframe to present this "legacy" (VSAM, IMS, SEQ) and non-relational (CA IDMS, CA Datacom) data as a relational data source. This relational translation is what can be linked to natively supported Optim DBMSs (Oracle and DB2 LUW are the most common). </div>
<div>
<span class="Apple-tab-span" style="white-space: pre;"> </span> </div>
<div>
<i>When selling and implementing Optim, there are two options for this middleware component of the solution:</i><br />
<a name='more'></a></div>
<div>
<br />
<ul>
<li>Classic Federation (which used to be known as WebSphere Classic Federation and is now InfoSphere Classic Federation)</li>
<li>Optim Connect (a "blue-washed" version of third-party Attunity Connect). </li>
</ul>
</div>
<div>
<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgJwc2W056vjtZe78jmgEHFfwaRbRtQPS-YAJBpcfqDcYv_n81Pum0anvDynI9lqc8Vigaz55wOGk0huWhYFoB656ph496YWEsFtTFQeusEwBJbeYr5EeCYWSmNSJzMlM_QYD92epKgQrGV/s1600/middleware_conceptual.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" height="192" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgJwc2W056vjtZe78jmgEHFfwaRbRtQPS-YAJBpcfqDcYv_n81Pum0anvDynI9lqc8Vigaz55wOGk0huWhYFoB656ph496YWEsFtTFQeusEwBJbeYr5EeCYWSmNSJzMlM_QYD92epKgQrGV/s640/middleware_conceptual.png" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">optim middleware options - conceptual process flow</td></tr>
</tbody></table>
<br /></div>
<div>
<i><b>Both products accomplish the same thing: Presenting non-relational data as relational data. However, there are some conditions that make one option more desirable than the other. You should try to determine these conditions prior to giving the customer a software quote.</b></i></div>
<div>
<span class="Apple-tab-span" style="white-space: pre;"> </span> </div>
<div>
<br />
<ol>
<li>Does the customer have CA IDMS or CA Datacom? If so, Classic Federation is currently the only middleware choice available. There is no OptimConnect support for CA databases at this time.</li>
<li>For all other non-relational mainframe data sources* (VSAM, IMS, SEQ), you have a choice. Both Classic Federation and Optim Connect support VSAM, IMS , and SEQ datasets. So is it a matter of just choosing the product that has the cooler logo or cheapest price? Not so fast! Here’s where your choice really matters, and can save you from having to rework the customers entitlements after the sale:</li>
</ol>
</div>
<div>
<span class="Apple-tab-span" style="white-space: pre;"> </span> </div>
<div>
<b>Classic Federation has some limitations. The following conditions must guide your choice of middleware when addressing VSAM, IMS, or SEQ datasets. Classic Federation cannot handle the following conditions in the record layouts (copybooks) of the data to be accessed:</b></div>
<div>
<br />
<br />
<ul>
<li>Occurs Depending On clauses (<a href="http://pic.dhe.ibm.com/infocenter/pdthelp/v1r1/topic/com.ibm.entcobol.doc_4.1/PGandLR/ref/rlddeoc2.htm" target="_blank">ODOs</a>) that are NOT at the end of the record layout</li>
<li>Complex <a href="http://pic.dhe.ibm.com/infocenter/pdthelp/v1r1/topic/com.ibm.entcobol.doc_4.1/PGandLR/ref/rlddered.htm" target="_blank">redefines </a>in the record layout. From our experience with both middleware products, let's define "complex" as redefines within redefines and/or any cases where you have redefines where you are crossing from standard character PIC clauses to packed decimals.</li>
</ul>
</div>
<div>
<span class="Apple-tab-span" style="white-space: pre;"> </span> </div>
<div>
<b>If either of the above conditions exist, you <u>must</u> choose Optim Connect.</b></div>
<div>
<span class="Apple-tab-span" style="white-space: pre;"> </span> </div>
<div>
While these functional discrepancies exist as of the date of this post, having a solid understanding of the data that will be touched by this middleware layer is crucial to building the correct product list for your client (if you're the seller) or helping your seller to understand your specific technical idiosyncrasies (if you're the customer). Making a switch in middleware engines after the software has been purchased is a cumbersome and time-consuming process that can be easily avoided with a bit of research and conversation during the sales cycle.</div>
<div>
<span class="Apple-tab-span" style="white-space: pre;"> </span> </div>
<div>
If you’re a client of IBM or Information Insights, a prospective user of Optim with legacy data, or an IBM sales or technical professional, contact us and we’ll share our experiences to help you make the right choices.</div>
<div>
<span class="Apple-tab-span" style="white-space: pre;"> </span> </div>
<div>
<a href="mailto:matthew.simons@infoinsightsllc.com" target="_blank">Matthew Simons</a> – ILMG Practice Leader</div>
<div>
<a href="mailto:greg@infoinsightsllc.com" target="_blank">Greg Marshall</a> – Principal</div>
<div>
</div>
<div>
<i><span style="color: red;">*note: the ISAM datasource was intentionally left out of this article. If ISAM is under consideration, please contact us and we can discuss additional considerations.</span></i></div>
Information Insightshttp://www.blogger.com/profile/01560037005312811863noreply@blogger.com1tag:blogger.com,1999:blog-132420452883280664.post-72243414035878121482013-04-02T17:24:00.002-07:002013-04-02T17:32:21.273-07:00Things You Need to Build Your Own STAP with mongoTap as an Exampleby John Haldeman, Security Practice Lead<br />
<br />
Late last year Joe DiPietro and his colleagues at IBM wrote two articles providing a detailed explanation of Guardium's Universal Feed (a link to those articles are found later in this post). The Universal Feed allows you to build your own STAPs for data sources that Guardium does not support. I recently built and <a href="https://github.com/johnhaldeman/mongoTap" target="_blank">open sourced a STAP for mongoDB</a>. I want to use this post to talk about some things that you will need in order to build a custom STAP (other than the knowledge of the protocol explained in the Universal Feed articles). I will use the mongoTap as an example for the discussion.<br />
<br />
<br />
<br />
<a name='more'></a>There are really three things you will need to build your own STAP:<br />
<ol>
<li>A source of audit data to log</li>
<li>Something to receive this audit data and translate it into Guardium's universal feed protocol</li>
<li>A Guardium Collector to record the data </li>
</ol>
<h2>
</h2>
<h3>
The Audit Data Source </h3>
One of the most difficult things to find is the first item: the source of the audit data to log. In fact, finding a good source for the audit trail is probably the biggest obstacle to building a custom STAP. Traditional Guardium STAPs tap into the client/server communication channels to find this data using operating systems APIs. The mongoTap uses a mongoDB utility called the <a href="http://docs.mongodb.org/manual/reference/mongosniff" target="_blank">mongosniff </a>to get it's audit trail information. mongosniff uses some of the same operating system APIs that traditional STAPs use. Calling mongosniff is the job of the mongoTap client which provides a stream of data to the mongoTap server.<br />
<h2>
</h2>
<h3>
Translation</h3>
The second item is the core of the custom STAP. It takes the audit data you receive from the audit data source you identified and translates it into the Universal Feed protocol that Guardium understands. Details of the Universal Feed protocol can be found in the Universal Feed articles mentioned earlier which can be found <a href="http://www.ibm.com/developerworks/data/library/techarticle/dm-1210universalfeed/index.html">here</a> and <a href="http://www.ibm.com/developerworks/data/library/techarticle/dm-1211universalfeed2/index.html">here</a>. They outline everything necessary for you to be able to format data in a way that Guardium can understand it.<br />
<br />
All of this translation takes a non-trivial amount of processing power to perform. There are connections
to be handled, sessions to be tracked, users to correlate (in mongoDB's case), and data to
be parsed and sent to the collector. Because of this, the choice was made to split out this processing into a separate component called the mongoTap server that could reside somewhere other than where mongoDB was installed. Similarly, Guardium's traditional STAPs leave their parsing and translation to processes that reside on the collectors.<br />
<br />
The mongoTap server uses regular expressions, the <a href="http://code.google.com/p/ruby-protobuf/" target="_blank">ruby-protobuf</a> ruby library, and the <a href="http://bindata.rubyforge.org/" target="_blank">bindata </a>ruby library to help with the translation (one thing to note that isn't explicitly mentioned in the universal feed articles is that the bit order should be big endian for your wrapper messages - that took some debugging to figure out). As for protocol buffers, if you want to build a type 1 STAP and use something other than Java, you'll likely want to start out with a .proto file. Unfortunately it isn't provided to you directly in the sample code. You can, however, derive the file from the compiled Java protocol buffer code. It's a little painstaking to do but you'll have a head start as this was done for the mongoTap. A partial reconstruction of Guardium's datasource proto file can be found <a href="https://github.com/johnhaldeman/mongoTap/blob/master/mongoTap/Datasource.proto" target="_blank">here</a> (enough was reconstructed to implement everything currently supported by the mongoTap).<br />
<br />
The mongoTap server uses another Ruby library called <a href="http://rubyeventmachine.com/" target="_blank">EventMachine </a>to handle it's communication with the mongoTap client. EventMachine has it's critics (and fans), but I found it to be invaluable in handling the stream of data coming from the mongoTap client and mongosniff. There was a lot less code to write because of it and no threads to maintain myself.<br />
<h2>
</h2>
<h3>
Collection</h3>
The final item needed is the Guardium collector. It handles all the logging. One particularly nice feature is that the collector does all of the session tracking for you if you provide a session locator consisting of a client IP, client port, database IP, and database port. I found we still needed some memory and tracking of the sessions for the mongoTap, but not having to acquire and maintain session IDs coming back to you from the collector is a big help and a smart design on part of the protocol.<br />
<br />
<br />
That's about it for the items you need to build your own STAP. The big lesson learned doing this is that the Universal Feed saves you a lot of time, but it still requires a lot of effort to build your own STAPs. That and you need to have a source of audit data. Those can be difficult to come by and you cannot always rely on it being as easy as it is for mongoDB whichcomes with the handy mongosniff utility.<br />
<br />Information Insightshttp://www.blogger.com/profile/01560037005312811863noreply@blogger.com0tag:blogger.com,1999:blog-132420452883280664.post-54292354026334281852013-03-01T11:16:00.000-08:002013-03-01T11:26:22.720-08:00Before/After Value Change Auditing in Guardiumby John Haldeman, Security Practice Lead<br />
<h3>
</h3>
<h3>
Overview</h3>
A little known but useful Guardium function is Value Change Auditing. We just had our second customer ask about it, so we thought it was time for a blog post on the subject. This post will explain what Before/After Value Change Auditing is and explain how to configure it to monitor an Oracle data source. While Oracle is used as an example, the same mechanisms and concepts apply to the other database types that are supported for this function (DB2, Informix, MS SQL Server, Sybase).<br />
<br />
Traditionally, when Guardium audits traffic, it monitors the communication stream between the database client and database server. So, you can see the SQL statement executed. For example:<br />
<blockquote class="tr_bq">
<b><span style="font-family: "Courier New",Courier,monospace;">UPDATE CUSTOMER SET CCN = ‘1234 1234 1234 1234’ WHERE NAME = ‘John';</span></b></blockquote>
The Problem is that we know what value CCN is <i><b>after </b></i>the update, but cannot easily see what the value of CCN was <i><b>before </b></i>this update.<br />
<br />
<a name='more'></a>Some customers need this information for certain compliance requirements that stress accuracy and change control. Theoretically, you could find out this information if you had a fairly complete audit trail. You would go into your audit logs, look for the all previous updates or inserts for that record, find the last two executed, and see what the value was and is now. This isn’t so easy, though. Most database systems in an environment are older than the Guardium deployment, and you’d only be able to see the previous values of records and fields that were affected since Guardium was deployed. Additionally, you likely aren’t logging all of the SQL to this level of detail if you are following best practices. Finally, it’s difficult to build reports that would show the before/after values consistently for each type of SQL statement that modifies the data.<br />
<br />
So, using the standard Guardium audit trail generated by the STAP is an awkward solution. Luckily Guardium has the capabilities to help you solve the problem more easily with Value Change Auditing. It works like this:<br />
<ol>
<li>Guardium deploys a new “audit database” (what this database is depends on the platform. For example in MS SQL it’s a new DB, in Oracle it’s a new Schema).</li>
<li>Guardium then deploys triggers to monitor and log changes to individual tables. Those triggers are set up populate corresponding audit tables in the audit database that Guardium created in step 1. When you are using Oracle, you can deploy streams instead of triggers to do this</li>
<li>As transactions are run the before/after values are populated by the database management system using the triggers and the audit database that Guardium created</li>
<li>On a regularly scheduled basis, Guardium imports the resulting data into its own database and then purges that data from the audit database</li>
</ol>
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhClhFw9DyPZp873iF3RXJdPgholNaUsWMs4rDHibuOWC5RCIaYu9YUxRlhhxx9OL_C6tk9JO6CNw8Ko2s88F7SCMq9g8GPW9LaQKnO_JNKMsGemBCmhmUZ_zRCfl4ZNtWml3cpVUbo5vRg/s1600/BeforeAfterArchitecture.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" height="243" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhClhFw9DyPZp873iF3RXJdPgholNaUsWMs4rDHibuOWC5RCIaYu9YUxRlhhxx9OL_C6tk9JO6CNw8Ko2s88F7SCMq9g8GPW9LaQKnO_JNKMsGemBCmhmUZ_zRCfl4ZNtWml3cpVUbo5vRg/s640/BeforeAfterArchitecture.png" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;"><b>Diagram of Value Change Auditing Architecture in Guardium</b></td></tr>
</tbody></table>
<br />
Let’s look at how you would accomplish this in Guardium for an Oracle database. <br />
<br />
<!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:RelyOnVML/>
<o:AllowPNG/>
</o:OfficeDocumentSettings>
</xml><![endif]--><br />
<!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves/>
<w:TrackFormatting/>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>EN-US</w:LidThemeOther>
<w:LidThemeAsian>X-NONE</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="true"
DefSemiHidden="true" DefQFormat="false" DefPriority="99"
LatentStyleCount="267">
<w:LsdException Locked="false" Priority="0" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" Priority="39" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" Name="toc 9"/>
<w:LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" Priority="10" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" Priority="11" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" Priority="22" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" Priority="59" SemiHidden="false"
UnhideWhenUsed="false" Name="Table Grid"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/>
</w:LatentStyles>
</xml><![endif]--><!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin-top:0in;
mso-para-margin-right:0in;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0in;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;}
</style>
<![endif]-->
<br />
<h3 class="MsoNormal">
STEP 1:<span style="mso-spacerun: yes;"> Create the Audit Database</span></h3>
<div class="MsoNormal">
This can be completed using the “Value Change Audit DB Creation” area of the Tools menu in the Guardium admin user interface. First, add a data source for the database you would like to implement value change auditing with. For Oracle, you would specify a user that has the SYSDBA role and log in as SYSDBA with that user (the creation of users that can create streams requires this level of permissions). We’ve had a lot more luck in using the standard Oracle JDBC driver (as opposed to the default Data Direct driver) in connecting to databases as SYSDBA. You can upload a standard Oracle JDBC driver in the Customer Upload section of the administration console. You then specify the tablespaces that this audit database will use. It’s a good idea to use a new purpose-built tablespace for value change auditing data to help prevent I/O contention with the database you are monitoring.</div>
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi_l1_97V8kLzia4NL8dw-w5d9eMYf8JXzloX3Y4K8So9UC-wDZGzM5Zx4EWJjwDF4AchoiwxnRj-oZiVq806D109hFfLUft0aSPqtu_uzKsB67AJ2jw6fqVAcobfkQ-sluP4D1wl6FpAFA/s1600/DataSourceDefinition.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi_l1_97V8kLzia4NL8dw-w5d9eMYf8JXzloX3Y4K8So9UC-wDZGzM5Zx4EWJjwDF4AchoiwxnRj-oZiVq806D109hFfLUft0aSPqtu_uzKsB67AJ2jw6fqVAcobfkQ-sluP4D1wl6FpAFA/s1600/DataSourceDefinition.png" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;"><b>The DataSource Created to create the audit database - Note the use of the standard Oracle driver and logging in as SYDBA </b></td></tr>
</tbody></table>
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg_dGMaatHBTMyL6Lou35KZBy9QF_D9x8Gx9ai3ohGbSKTwbpbEQLr_mxYdtQRmOb6kAzCoWjmmEk_L8pU-lOmrUiQe1pIJ2yLpQGf2Nq1Wy9xAKNHqk5d4D0b7Zj5-ao66vvNOXup1ckPb/s1600/ValueChangeAuditDB.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg_dGMaatHBTMyL6Lou35KZBy9QF_D9x8Gx9ai3ohGbSKTwbpbEQLr_mxYdtQRmOb6kAzCoWjmmEk_L8pU-lOmrUiQe1pIJ2yLpQGf2Nq1Wy9xAKNHqk5d4D0b7Zj5-ao66vvNOXup1ckPb/s1600/ValueChangeAuditDB.png" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;"><b>Other Parameters - Entering a password for the Audit DB User, and tablespace parameters</b></td></tr>
</tbody></table>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
<!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:RelyOnVML/>
<o:AllowPNG/>
</o:OfficeDocumentSettings>
</xml><![endif]--></div>
<h3>
STEP 2:<span style="mso-spacerun: yes;"> </span>Deploy Triggers
</h3>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
Once you have successfully created the audit database, you
would deploy some triggers. This can be done using the Value Change Auditing
Builder application in the tools menu of the admin user interface. Add the same
datasource as in Step 1 and choose the tables you would like to have monitored.
Then deploy your triggers (or streams) by selecting the tables you want and
clicking Add Selections.</div>
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjPKD3yagIK2HHyZyiSL4YmRfNIVgZ6dpBi__aGVJIVU2FrMNEMYrRKgW0M80z5PyvPoX5r7ch6btYutVOgKbJV42_iJ0RS9Sbclv6QvmTbAGb0bFvoXq3y2kLTN2JwFH9rj4Z44K1VANb-/s1600/TriggerOrStreamDeployment.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjPKD3yagIK2HHyZyiSL4YmRfNIVgZ6dpBi__aGVJIVU2FrMNEMYrRKgW0M80z5PyvPoX5r7ch6btYutVOgKbJV42_iJ0RS9Sbclv6QvmTbAGb0bFvoXq3y2kLTN2JwFH9rj4Z44K1VANb-/s1600/TriggerOrStreamDeployment.png" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;"><b>Defining the Triggers/Streams to be Created and Whether to Monitor inserts, updates, and deletes</b></td></tr>
</tbody></table>
<div class="MsoNormal">
<br /></div>
<h3 class="MsoNormal">
STEP 3: Watch for Changes in the Monitored Table</h3>
<div class="MsoNormal">
Step 3 is done automatically by the database but feel free to change some values on a table so that you can see value change auditing in action.</div>
<div class="MsoNormal">
<br /></div>
<h3 class="MsoNormal">
STEP 4: Importing the Results into Guardium</h3>
<div class="MsoNormal">
Step 4 is performed in the Value Change Audit DB Update & Upload application in the tools menu of the admin user interface. Select the audit database you created in Step 1 and schedule imports to occur on a regular basis. Once data is imported you can view the data in a report. One such report can be found in the Daily Monitor tab of the admin user interface. That report’s name is “Values Changed”.</div>
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgk_ExeXGHeWmNTwQwCFRdX3Yk3fl9C4-tv2db1IKyidp3u61a_tpycgYZfX4wlF0xcxmPhdTjNT8A7Siv-p3t3l0RtR4RWc2cZDLNVySqg8IWjqWHUo8iBHIZHb3MuR0R7Wc5KgdKtT5K9/s1600/ValuesChangedReport.png" target="_blank"><img border="0" height="139" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgk_ExeXGHeWmNTwQwCFRdX3Yk3fl9C4-tv2db1IKyidp3u61a_tpycgYZfX4wlF0xcxmPhdTjNT8A7Siv-p3t3l0RtR4RWc2cZDLNVySqg8IWjqWHUo8iBHIZHb3MuR0R7Wc5KgdKtT5K9/s640/ValuesChangedReport.png" width="640" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgk_ExeXGHeWmNTwQwCFRdX3Yk3fl9C4-tv2db1IKyidp3u61a_tpycgYZfX4wlF0xcxmPhdTjNT8A7Siv-p3t3l0RtR4RWc2cZDLNVySqg8IWjqWHUo8iBHIZHb3MuR0R7Wc5KgdKtT5K9/s1600/ValuesChangedReport.png" target="_blank">The Change Value Data Imported into Guardium (click here to enlarge)</a></td></tr>
</tbody></table>
<h3 class="MsoNormal">
Conclusion</h3>
<div class="MsoNormal">
As you can see, this report is easier to read and understand compared to ones that would be generated by Guardium’s standard audit trail for this purpose. This does come at a cost, however, because you have effectively implemented a native logging solution and you should be concerned about the overhead introduced by the triggers and additional logging. As such, you should be careful to only implement value change auditing when the business requires this kind of tracking and when the business is willing to accept the costs of the mechanism. </div>
<div class="MsoNormal">
<br /></div>
<br />
<div class="MsoNormal">
<br /></div>
Information Insightshttp://www.blogger.com/profile/01560037005312811863noreply@blogger.com0tag:blogger.com,1999:blog-132420452883280664.post-6536949135486429402013-01-21T11:12:00.000-08:002013-01-21T11:21:48.973-08:00Improving Optim Delete Performance By Looking Up Multiple Keys at Once<br />
<div style="font-size: 11pt; margin: 0in;">
<span style="font-family: Arial, Helvetica, sans-serif;">Optim delete
performance can be enhanced through many
different methods (turning off "compare whole row", locking tables, disabling triggers
and constraints, ensuring the primary key is indexed, etc). By far one of the biggest bangs for your
Optim buck is asking the database a question one time (can you please find and
delete <span style="font-style: italic; font-weight: bold;">n</span> rows) but
having <span style="font-style: italic; font-weight: bold;">n</span> be a long list
of primary key values, rather than just one value. There are two ways to accomplish this
multi-key lookup - Array Deletes and Forced Key Lookup.</span></div>
<div style="font-size: 11pt; margin: 0in;">
<span style="font-family: Arial, Helvetica, sans-serif;"></span><br />
<a name='more'></a><span style="font-family: Arial, Helvetica, sans-serif;"><br /></span></div>
<div style="font-size: 11pt; margin: 0in;">
<span style="font-family: Arial, Helvetica, sans-serif;"></span></div>
<div style="margin: 0in;">
</div>
<div style="font-size: 11pt; margin: 0in;">
</div>
<h2>
<span style="font-size: 11pt;"><span style="font-family: Arial, Helvetica, sans-serif;">Array Deletes</span></span></h2>
<br />
<div style="font-size: 11pt; margin: 0in;">
<span style="font-family: Arial, Helvetica, sans-serif;"><span style="font-size: 11pt;">Array Delete
processing (building an array of Primary Keys from the table being deleted and
using that array as the WHERE clause for your delete statement) is a great
technique for increasing the efficiency of your Optim deletes. </span><span style="font-size: 11pt;">However, there are
some caveats to be aware of when working with Array Delete processing in
Optim. The biggest is that Array Delete
functionality only exists for DB2 LUW and Oracle!</span></span></div>
<div style="font-size: 11pt; margin: 0in;">
<span style="font-family: Arial, Helvetica, sans-serif;"><br /></span></div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div style="margin: 0in;">
</div>
<br />
<ul>
<li><span style="font-size: 11pt;"><span style="font-family: Arial, Helvetica, sans-serif;">DB2 LUW - Optim will attempt
to use Array Delete processing automatically with no intervention from the
user, providing the following are all true:</span></span></li>
</ul>
<br />
<ol style="direction: ltr; font-size: 11pt; margin-bottom: 0in; margin-left: 0.375in; margin-top: 0in; unicode-bidi: embed;" type="1">
<li><span style="font-size: 11pt;"><span style="font-family: Arial, Helvetica, sans-serif;">The table (in
both the source file and the database) has a unique primary key</span></span></li>
<li><span style="font-size: 11pt;"><span style="font-family: Arial, Helvetica, sans-serif;">Compare Row Contents is not
selected</span></span></li>
<ol style="direction: ltr; font-size: 11pt; margin-bottom: 0in; margin-left: 0.375in; margin-top: 0in; unicode-bidi: embed;" type="1">
</ol>
<li><span style="font-size: 11pt;"><span style="font-family: Arial, Helvetica, sans-serif;">File Attachments
are not being deleted</span></span></li>
<ol style="direction: ltr; font-size: 11pt; margin-bottom: 0in; margin-left: 0.375in; margin-top: 0in; unicode-bidi: embed;" type="1">
</ol>
</ol>
<span style="font-family: Arial, Helvetica, sans-serif;"><span style="font-size: 11pt;"></span></span><br />
<ul><span style="font-family: Arial, Helvetica, sans-serif;"><span style="font-size: 11pt;">
<li><span style="font-size: 11pt;">Oracle - Optim will attempt
to use Array Delete processing after the user turns on "Use Oracle
Array Delete" in the Oracle submenu on the Database tab in Product
Options, along with confirming that all of the same rules for DB2 LUW
exist (Primary Keys, no Compare Row Contents, no File Attachments)</span></li>
</span></span></ul>
<span style="font-family: Arial, Helvetica, sans-serif;"><span style="font-size: 11pt;">
</span><span style="font-size: 15px;"><br /></span></span><br />
<ol style="direction: ltr; font-size: 11pt; margin-bottom: 0in; margin-left: 0.375in; margin-top: 0in; unicode-bidi: embed;" type="1">
</ol>
<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhm8lLeaeoi1OwJ-TQy8f1vykkJSIk8ABAfv7dOK3UX_X3dV-mQRpgw954HWZiz4B9ybUhnDNuMWs5AMkJZtCAxUo9RUPECBPwmnM0DRLD_rnDPao1VyzR79wQbwL9jHx2jIx8Ju3r4tdxi/s1600/productOptions_OracleArrayDelete.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><span style="font-family: Arial, Helvetica, sans-serif;"><img border="0" height="382" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhm8lLeaeoi1OwJ-TQy8f1vykkJSIk8ABAfv7dOK3UX_X3dV-mQRpgw954HWZiz4B9ybUhnDNuMWs5AMkJZtCAxUo9RUPECBPwmnM0DRLD_rnDPao1VyzR79wQbwL9jHx2jIx8Ju3r4tdxi/s400/productOptions_OracleArrayDelete.png" width="400" /></span></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;"><span style="font-family: Arial, Helvetica, sans-serif;">Oracle Settings inside Product Options</span></td></tr>
</tbody></table>
<div style="margin: 0in;">
<span style="font-size: 15px;"><span style="font-family: Arial, Helvetica, sans-serif;"><br /></span></span></div>
<div style="margin: 0in;">
</div>
<div style="font-size: 11pt; margin: 0in;">
<i><b><span style="font-family: Arial, Helvetica, sans-serif;">NB: If your
site audits Delete processing, be aware that Array Delete may report rows as
being successfully deleted that do not exist in the database and, therefore,
were not actually deleted by the process.
(from Optim's help "About Delete Requests")</span></b></i></div>
<div style="font-size: 11pt; margin: 0in;">
<span style="font-family: Arial, Helvetica, sans-serif;"></span></div>
<span style="font-family: Arial, Helvetica, sans-serif;"><br /></span>
<br />
<h2>
<span style="font-size: 11pt;"><span style="font-family: Arial, Helvetica, sans-serif;">Forced Key Lookup</span></span></h2>
<div style="font-size: 11pt; margin: 0in;">
<span style="font-size: 11pt;"><span style="font-family: Arial, Helvetica, sans-serif;">For SQL Server, Informix, and
Sybase you use the other method for sending multiple key values - Forced
Key Lookup Limits. In a delete
request, select the "Edit Strategy" choice on the Tools menu
from the Delete Request Editor.
From the resulting Table Access Strategy screen, the Optim
developer can tell Optim (on a table by table basis or for all using the
Set All shortcut) how to lookup values in the table being deleted
(Default, Force Optim to use a Key Lookup, or Force Optim to do a table
scan). For the Force Key Lookup
option, the Optim developer can tell Optim how many key values to look up
in each request to the database (up to 100) - going from the default of 1
to the maximum of 100 means 99 less database requests (and therefore 99
less chunks of transaction overhead) while still selecting 100 rows for
deletion. As with Array Delete
processing, there are special requirements:</span></span></div>
<div style="font-size: 11pt; margin: 0in;">
</div>
<ol style="direction: ltr; font-size: 11pt; margin-bottom: 0in; margin-left: 0.375in; margin-top: 0in; unicode-bidi: embed;" type="1">
<li><span style="font-family: Arial, Helvetica, sans-serif; font-size: 11pt;">An index on the
primary key is defined for the table</span></li>
<ol style="direction: ltr; font-size: 11pt; margin-bottom: 0in; margin-left: 0.375in; margin-top: 0in; unicode-bidi: embed;" type="1">
</ol>
<li><span style="font-family: Arial, Helvetica, sans-serif; font-size: 11pt;">Compare Row
Contents is not selected</span></li>
<ol style="direction: ltr; font-size: 11pt; margin-bottom: 0in; margin-left: 0.375in; margin-top: 0in; unicode-bidi: embed;" type="1">
</ol>
<li><span style="font-family: Arial, Helvetica, sans-serif; font-size: 11pt;">There are no Row
Level Archive Actions defined for the Delete Process (e.g. Before Delete
of Row)</span></li>
<ol style="direction: ltr; font-size: 11pt; margin-bottom: 0in; margin-left: 0.375in; margin-top: 0in; unicode-bidi: embed;" type="1">
</ol>
<li><span style="font-family: Arial, Helvetica, sans-serif; font-size: 11pt;">The table does
not have any child tables</span></li>
</ol>
<span style="font-family: Arial, Helvetica, sans-serif; font-size: 11pt;"></span><br />
<div style="font-size: 11pt; margin: 0in;">
<span style="font-family: Arial, Helvetica, sans-serif; font-size: 11pt;"><span style="font-family: Arial, Helvetica, sans-serif; font-size: 11pt;"><br /></span></span></div>
<span style="font-family: Arial, Helvetica, sans-serif; font-size: 11pt;">
</span>
<br />
<div style="font-size: 11pt; margin: 0in;">
<span style="font-family: Arial, Helvetica, sans-serif; font-size: 11pt;">As
we said at the beginning, there are myriad methods to improve Optim's delete
processing performance but asking for multiple records at once is a great way
to cut down on network traffic and database overhead ultimately increasing
performance. Why spend the time getting
1 cookie on 5 separate trips when you can just get 5 cookies in one trip and
then not have to get off the couch again?
Of course, it still takes as long to eat each cookie (delete each row)
but at least you have only had to incur the overhead of getting the cookies
(asking for and finding the rows) once!</span></div>
<div style="font-size: 11pt; margin: 0in;">
<span style="font-family: Arial, Helvetica, sans-serif; font-size: 11pt;"><br /></span></div>
<div style="font-size: 11pt; margin: 0in;">
<span style="font-family: Arial, Helvetica, sans-serif; font-size: 11pt;">Cheers,</span></div>
<div style="font-size: 11pt; margin: 0in;">
<span style="font-family: Arial, Helvetica, sans-serif; font-size: 11pt;">Matthew Simons</span></div>
<div style="font-size: 11pt; margin: 0in;">
<span style="font-family: Arial, Helvetica, sans-serif; font-size: 11pt;">Practice Lead, Information Lifecycle Management</span></div>
<br />
<br />Information Insightshttp://www.blogger.com/profile/01560037005312811863noreply@blogger.com1tag:blogger.com,1999:blog-132420452883280664.post-37714013152153774622012-11-30T07:22:00.002-08:002012-11-30T07:26:43.452-08:00Compare IBM data masking solutions: InfoSphere Optim and DataStage<div _mce_style="font-size: 14pt; color: #0065a4;" style="color: #0065a4;">
<div class="dw-content-head">
<h1>
<span style="font-size: small;"><i>Options for depersonalizing sensitive production data for use in your
test environments</i></span></h1>
</div>
<span style="font-size: small;"><b><span _mce_style="font-size: 14pt;">IBM developerWorks</span>® Features Information Insights</b></span></div>
<div _mce_style="margin-top: 0px; margin-bottom: 0px;" style="margin-bottom: 0px; margin-top: 0px;">
<br /></div>
<div>
<span style="font-size: small;">John Haldeman, Guardium Software Engineer with Information Insights, was featured on IBM developerWorks®. Haldeman
writes that many organizations use production data to populate their
test environments. The problem with this is that if there is
sensitive data in your production environment, then you are
exposing that data to software developers and testers. IBM®
offers the following two solutions to solve this problem:
The InfoSphere® Optim® Data Masking option for Test Data
Management and the InfoSphere DataStage Pack for Data Masking. Both mask
data and depersonalize it while still maintaining it's
realism. <br /><br />This <a _mce_href="http://www.ibm.com/developerworks/data/library/techarticle/dm-1211maskingsolution/index.html" _mce_shape="rect" _mce_style="color: #0065a4; text-decoration: underline;" href="http://www.ibm.com/developerworks/data/library/techarticle/dm-1211maskingsolution/index.html" shape="rect" style="color: rgb(0, 101, 164) ! important; text-decoration: underline ! important;" target="_blank">article</a>
explores the common functions that both solutions have that are
requirements for effective data masking, and then it
explores the differences between the products. After reading
this <a _mce_href="http://www.ibm.com/developerworks/data/library/techarticle/dm-1211maskingsolution/index.html" _mce_shape="rect" _mce_style="color: #0065a4; text-decoration: underline;" href="http://www.ibm.com/developerworks/data/library/techarticle/dm-1211maskingsolution/index.html" shape="rect" style="color: rgb(0, 101, 164) ! important; text-decoration: underline ! important;" target="_blank">article</a> you should be able to pick the right IBM data masking solution to best meet your requirements.</span><br />
<br />
<span style="font-size: small;"><span style="font-size: small;">
Link to <a _mce_href="http://www.ibm.com/developerworks/data/library/techarticle/dm-1211maskingsolution/index.html" _mce_shape="rect" _mce_style="color: #0065a4; text-decoration: underline;" href="http://www.ibm.com/developerworks/data/library/techarticle/dm-1211maskingsolution/index.html" shape="rect" style="color: rgb(0, 101, 164) ! important; text-decoration: underline ! important;" target="_blank">full story</a></span>.</span></div>
Information Insightshttp://www.blogger.com/profile/01560037005312811863noreply@blogger.com0tag:blogger.com,1999:blog-132420452883280664.post-56296331293358467992012-08-10T05:51:00.001-07:002012-11-30T07:26:23.088-08:00Guardium End-user Translation - De-mystified<div _mce_style="font-size: 14pt; color: #0065a4;" style="color: #0065a4;">
<div class="dw-content-head">
<h1>
<span style="font-size: small;"><i><strong><span style="font-size: small;">Five methods for identifying application end users <span style="font-size: small;">associated</span> with dat<span style="font-size: small;">abase activit<span style="font-size: small;">y</span></span></span></strong></i></span></h1>
<span style="font-size: small;"><b><span _mce_style="font-size: 14pt;">IBM developerWorks</span>® Features Information Insights</b></span></div>
</div>
<div _mce_style="margin-top: 0px; margin-bottom: 0px;" style="margin-bottom: 0px; margin-top: 0px;">
<br /></div>
<span style="font-size: small;">John Haldeman, Guardium Software Engineer with Information Insights, was featured on IBM developerWorks®. Haldeman
writes that</span><strong><span style="font-size: small;"><em><span style="font-size: small;"> <span style="font-size: small;">m</span></span></em></span></strong>any organizations today have data auditing requirements that
make it mandatory to be able to identify which application end users are
executing specific database transactions. In an environment where a connection
pool is being used to enhance performance, it can be a challenge to identify
the end user. Learn five methods for solving this fundamental governance
problem using IBM® InfoSphere® Guardium®, and understand which
of these methods is most applicable for your environment.<br />
<br />
Link to <a href="https://www.ibm.com/developerworks/data/library/techarticle/dm-1105fivemethods/" target="_blank">full story</a>. <br />
<span style="font-size: small;"><br /></span>
<div class="ibm-column ibm-first">
</div>
Information Insightshttp://www.blogger.com/profile/01560037005312811863noreply@blogger.com0