Add a DBMS for vulnerability assessment

Prev Next

Configure multiple DBMSs for vulnerability assessment by adding the DBMS to the VA server and configuring the necessary settings.

  1. On the DBMSs page, click the DBMS tab.

  2. Click Add VA DBMS.

  3. From the DBMS type drop-down list, select the database type, such as, Oracle, MSSQL, MYSQL, SQL Azure, or Sybase.

    Due to MySQL licensing restrictions, you need to download the MySQL JDBC driver from the MySQL website:

    • Download the Platform Independent (Architecture Independent), ZIP Archive file from http://dev.mysql.com/downloads/connector/j/

    • Extract the file and copy mysql-connector-java-<version no>.jar to one of the following locations:

      • All versions prior to Database Security 4.8: <Server Installation Directory>\common\lib

      • Database Security 4.8 and later: <Server Installation Directory>\lib

    • Restart the Database Security server

  4. In the Host/IP field, enter the name of the host server or IP address, then click test to verify the validity of the host name or IP address.

  5. Configure these host parameters:

    • In the Port filed, enter the number of the port for connecting to the database. Click test to check its validity.

    • In the Sid, Database Name, or Instance Name field, enter the respective service name or database instance ID on the server. Click test to check its validity.

      Note

      The field varies based on the type of database selected in the DBMS type.

  6. On the DBMS Connection, enter the user name and password to be used to connect to the DBMS. Scripts that create a user with the correct and minimal permissions for scanning are available in the screen.

  7. (Optional) Click Advanced to configure more VA parameters (used for troubleshooting purposes only):

    • Connection String — (Optional) The connection string used to connect the DBMS.

    • Connection Properties — (Optional) Properties typically used by Technical Support for troubleshooting the DBMS connection.

    • Enable alternative DBMS connection (advanced users only, for DAM only): When selected, alternative connections can be made using these parameters:

      • User Name — The user name to be used to connect to the DBMS.

      • Password — The password to be used to connect to the DBMS.

      • Connection String — The connection string used to connect the DBMS. This parameter is applicable for Oracle DBMSs only.

  8. Click Test DBMS Connection to check the connectivity between the VA server and the database.

  9. (Optional) To view users that were excluded from weak password tests, expand the Exclude Users from test section. The listed users are exempt from weak password tests based on exceptions in the VA Results page. You can manually delete a user from the list if needed.

  10. (Optional) Click OS Connection and select Enable os check to configure the connection and test the operating system:

    • OS User Name — The user name to be used to log on to the operating system.

    • OS Password — The password to be used to log on to the operating system.

    • Test OS Connection — Check the connection of operating system.

  11. Click Save.