Quest® InTrust for Databases

Version 2.2.1 

Release Notes

February, 2008

Contents

Welcome to InTrust for Databases

InTrust for Databases is a database audit management system that is designed to provide maximum visibility into your database activities and confidence that your data assets are secure. InTrust for Databases addresses the issues of database control, and provides a way to enforce the requirements of external regulations, internal policies, and database best practices. It measures the effectiveness of existing controls on database intrusions, theft, fraud, and corruption, and also identifies new threats and exploits that require additional control solutions.

InTrust for Databases Console monitors critical systems and detects inappropriate or suspicious access and exploits, and then generates reports and automated real-time alerts on these activities. Although InTrust for Databases sees and logs all SQL operations that run on a database, it does not monitor actual customer data. Its auditing capabilities keep a history of database events, which aids in conducting complete forensic investigations. InTrust wizards make it easy to set up policies to define and deal with a compromise to your company's database systems. A separate application, InTrust for Databases Administrator, manages the servers and data collecting agents used by the Console. InTrust features help you perform the following tasks:

• Review Policies - See at a glance the most urgent violations of your threat and exploit policies for all monitored databases. Rapidly open tickets, drill down on the relevant incidents, and switch to forensics for detailed investigations.
• Review Tickets - See at a glance which audit tickets require the most urgent attention. Ensure that your Service Level Agreements (SLAs) remain in focus, that tickets do not grow stale, and that ticket queues are appropriately balanced amongst your staff. Keep detailed history of your findings and resolution for each ticket, and ensure that the appropriate investigation and closure procedures are followed.
• Perform Forensic Investigations - Collect additional discovery and detection data to help resolve problems with sessions, objects, commands, and errors related to an exploit, threat, or vulnerability ticket. You can also raise a ticket, track progress, close an investigation once adequate explanations are documented and approved, and issue a daily report on the outcome of the forensic reviews and associated investigations.
• Profile Assets - Catalog your instance, user, and table assets by grouping them into profiles of shared ownership, business value, and exposure to risk.
• Create Reports - Create reports about instances, profiles, assets, unprofiled assets, policies, incidents, tickets, users, and authorized connections. These reports are snapshots in time which an auditor can compare with more recent snapshots and quickly see exactly what changed. You can generate reports from the InTrust for Databases console or from the command line.
   

Back to Top

New in This Release

This release includes the following changes:

• Provides support for Microsoft reporting services
• Restarts SQL Server to remove the previous audit library after you stop monitoring or after uninstall
• Provides support for session filtering to optionally restrict which sessions get audited

This release also includes the following changes made in release 2.2:

• Improves command-line reports
• Provides SQL Server 2005 64-bit support on AMD64 and Intel EM64T monitored hosts
• Provides enhanced SQL Server and Oracle support on Windows for monitored hosts
• Provides Oracle on Linux 64-bit support on AMD64 and Intel EM64T monitored hosts
• Resolves miscellaneous issues

Note: To get reports from the command line, you must have Windows PowerShell™ installed on your console and have the Quest.InTrustDB.Commands.dll snap-in registered. The InTrust for Databases Console help system now describes these procedures in detail.

Back to Top

Resolved Issues and Enhancements

The following is a list of issues addressed and enhancements implemented since the release of InTrust for Databases 2.1:

Back to Top

Known Issues

The following is a list of issues known to exist at the time of this release.

Back to Top

Third Party Known Issues

On Windows 2000 machines, the InTrust for Databases Console application may encounter an access violation error when minimizing or resizing the InTrust for Databases window.

Workaround:  Close InTrust for Databases Console application and reopen.

If you plan to monitor databases that run on AIX 5.2 or 5.3, there is a bug in the AIX kernel that affects InTrust for Databases. On these systems, there is a rare chance of having processes from Oracle sessions that die and their data collectors remain in the system. They do not perform any work, but remain in the process table and cannot be removed. The following APARs describe the bug and link to a patch:

APAR IY98727 : http://www-1.ibm.com/support/docview.wss?uid=isg1IY98727
APAR IY95948 : http://www-1.ibm.com/support/docview.wss?uid=isg1IY95948

Back to Top

Upgrade and Compatibility

See the InTrust for Databases Installation Guide 2.2 for instructions on how to upgrade from version 2.0 or 2.1 or for instructions on how to install a patch.

If you are using an older version of InTrust for Databases, please contact Quest Support.

Back to Top

System Requirements

There are three system components to consider when you install InTrust for Databases: Console, IDB Server, and Monitored Instances on database hosts. Each has separate requirements. For more information, see the InTrust for Databases Installation Guide.

Console Requirements

The Console is a Windows computer that:

• Runs InTrust for Databases Console
• Runs InTrust for Databases Administrator
• Retrieves stored data for display and reports

You must be a USER in the Power User Group to install InTrust for Databases (Console and Administrator) on a Windows system. Your system must meet the following minimum hardware and software requirements:

IDB Server Requirements

The InTrust for Databases (IDB) Server is a Windows or Linux machine that performs the following functions:

• Stores profiles, policies, forensic data, and tickets
• Applies policies to the audited databases
• Generates alerts
   

Note: The IDB server requires the installation of Quest Agent Manager software.

Before installing InTrust for Databases server software, ensure your system meets the following minimum hardware and software requirements:

Monitored Instances on Database Hosts

Monitored Instances are databases to which you apply your audit policies. The database hosts are any machines that InTrust for Databases supports and contain the monitored instances.

Note: These hosts require the manual installation of the Quest Agent Manager framework and an IDB agent.

Before installing InTrust for Databases agent software, ensure your system meets the following minimum hardware and software requirements:

Back to Top

Global Operations

This section contains information about installing and operating this product in non-English configurations, such as those needed by customers outside of North America. This section does not replace the materials about supported platforms and configurations found elsewhere in the product documentation.

This release is Unicode-enabled and supports any character set. In this release, all product components should be configured to use the same or compatible character encodings and should be installed to use the same locale and regional options. This release is targeted to support operations in the following regions: North America, Western Europe and Latin America, Central and Eastern Europe, Far-East Asia, Japan.

This release has the following known capabilities or limitations: InTrust for Databases users and passwords are not unicode enabled. Oracle databases with a charset (as opposed to ncharset) that is not UTF8 (like ja16euc or ja16sjis) will not display non-ascii letters correctly.
 

Back to Top

Getting Started

Contents of the Release Package

The InTrust for Databases 2..2.1 release package contains the following products:

• Quest InTrust for Databases 2.2.1 (Administrator and User Console)
• Agent Manager framework
• IDB collector agent
• IDB audit server
• Microsoft .NET 2.0 runtime redistributable
• libquest library
• Product Documentation, including:
  • Installation Guide
  • Online Help
  • Release Notes
  • User Guide

Installation Instructions

Refer to the InTrust for Databases Installation Guide for installation instructions.

You can install the IDB server and IDB agent from the InTrust for Databases Administrator console. You need an ADMIN role to run the Administrator console.

Back to Top

For More Information

Contacting Quest Software:

Refer to our web site for regional and international office information.

Contacting Quest Support:

Quest Support is available to customers who have a trial version of a Quest product or who have purchased a commercial version and have a valid maintenance contract.
Quest Support provides around the clock coverage with SupportLink, our web self-service. Visit SupportLink at http://support.quest.com.

From SupportLink, you can do the following:

• Quickly find thousands of solutions (Knowledgebase articles/documents).
• Download patches and upgrades.
• Seek help from a Support engineer.
• Log and update your case, and check its status.

View the Global Support Guide for a detailed explanation of support programs, online services, contact information, and policy and procedures.
The guide is available at: http://support.quest.com/pdfs/Global Support Guide.pdf.

Back to Top

© 2008 Quest Software, Inc.

ALL RIGHTS RESERVED.

This document contains proprietary information protected by copyright. The software described in this document is furnished under a software license or nondisclosure agreement. This software may be used or copied only in accordance with the terms of the applicable agreement. No part of this guide may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying and recording for any purpose other than the purchaser’s personal use without the written permission of Quest Software, Inc.

If you have any questions regarding your potential use of this material, contact:

Refer to our website for regional and international office information.

Trademarks

Quest, Quest Software, the Quest Software logo, Aelita, AppAssure, Benchmark Factory, Big Brother, DataFactory, DeployDirector, ERDisk,   Foglight, Funnel Web, I/Watch, Imceda, InLook, IntelliProfile, Internet Weather Report, InTrust, IT Dad, JClass, Jint, JProbe, LeccoTech, LiteSpeed, LiveReorg, NBSpool, NetBase, Npulse, PerformaSure, PL/Vision, Quest Central, RAPS, SharePlex, Sitraka, SmartAlarm, Spotlight, SQL LiteSpeed, SQL Navigator, SQLab, SQL Watch, Stat, Stat!, StealthCollect, Tag and Follow, Toad, T.O.A.D., Toad World, Vintela, Virtual DBA, Xaffire, and XRT are trademarks and registered trademarks of Quest Software, Inc in the United States of America and other countries. Other trademarks and registered trademarks used in this guide are property of their respective owners.

Disclaimer

The information in this document is provided in connection with Quest products. No license, express or implied, by estoppel or otherwise, to any intellectual property right is granted by this document or in connection with the sale of Quest products. EXCEPT AS SET FORTH IN QUEST'S TERMS AND CONDITIONS AS SPECIFIED IN THE LICENSE AGREEMENT FOR THIS PRODUCT, QUEST ASSUMES NO LIABILITY WHATSOEVER AND DISCLAIMS ANY EXPRESS, IMPLIED OR STATUTORY WARRANTY RELATING TO ITS PRODUCTS INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. IN NO EVENT SHALL QUEST BE LIABLE FOR ANY DIRECT, INDIRECT, CONSEQUENTIAL, PUNITIVE, SPECIAL OR INCIDENTAL DAMAGES (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, BUSINESS INTERRUPTION OR LOSS OF INFORMATION) ARISING OUT OF THE USE OR INABILITY TO USE THIS DOCUMENT, EVEN IF QUEST HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Quest makes no representations or warranties with respect to the accuracy or completeness of the contents of this document and reserves the right to make changes to specifications and product descriptions at any time without notice. Quest does not make any commitment to update the information contained in this document.

Back to Top