The Global Profile panel defines defaults that apply to all users.
By default, for any new report, or for any report contained in a default layout, aliases are not used. To display aliases for an individual report, you can open its Customize Portlet panel and mark the Show Aliases On button. If more often than not, you would rather see aliases by default, you can change the default aliases setting for all reports, as follows:
Select Administration Console > Global Profile to open the Global Profile panel.
Mark the Use Aliases in Reports unless otherwise specified checkbox.
Click Apply.
PDF files created by various Guardium components (audit tasks, for example) have a standard page footer. To customize that footer:
Select Administration Console > Global Profile to open the Global Profile panel.
In the PDF Footer Text field, enter the text to be printed at the bottom of each page.
Click Apply.
To customize the message template used to generate alerts:
Select Administration Console > Global Profile to open the Global Profile panel.
In the Message Template
text box, edit the alert template text.
The template uses placeholders for variables: %%variableName,
where the variable name is terminated by a space character. Be sure to
terminate each variable name that you use with a space character. For
a list of variables, see the table below.
You can mark the no wrap checkbox
near the bottom of the panel to see where the line breaks appear in the
message.
Click Apply when you are done.
Changes will not take effect until the inspection engines are restarted. To do that now, select Administration Console > Inspection Engines > Restart Inspection Engines.
Variable |
Description |
%%ruleDescription |
The rule description from the policy rule definition |
%%category |
Category from the rule definition |
%%classification |
Classification from the rule definition |
%%severity |
Severity from the rule definition |
%%ruleID |
The rule number from the rule definition |
%%sessionStart |
Session start time (login time) |
%%serverType |
The database server type |
%%clientIP |
Client IP address |
%%serverIP |
Server IP address |
%%clientPort |
Client port number |
%%serverPort |
Server port number |
%%netProtoco |
Network protocol – for K-TAP on Oracle, this may display as either IPC or BEQ |
%%DBProtocol |
Database protocol |
%%DBProtocolVersion |
Database protocol version |
%%DBUser |
Database user name |
%%AppUserName |
Application user name |
%%SourceProgram |
Source program name |
%%AuthorizationCod |
Authorization code |
%%requestType |
Request type |
%%lastError |
Last error description; available only when a SQL error request triggering an exception rule contains a last error description field |
%%SQLString |
SQL string (if any) |
To add a company logo graphic to the upper right portion of the Guardium window, or to add other HTML content to the bottom of the Guardium window:
Select Administration Console > Global Profile to open the Global Profile panel.
In the HTML - Left and HTML - Right text boxes, enter the HTML for the text or any other items you want to include on the window.
Optionally click the preview button to verify that your HTML displays as expected.
Click Apply.
In the Upload Logo Image pane, if you want to include a logo image in the upper-right portion of the portal window, enter an image file name or click the Browse button to select a file to upload to the Guardium appliance, and then click the Upload button. The image will display the next time the window is refreshed.
To add a message to display in a message box, each time a user logs in:
Select Administration Console > Global Profile to open the Global Profile panel.
In the Login Message text box, enter the text you want to display when each user logs in.
Mark the show login message box to enable the display of the login message (or clear the box to disable the display).
Click Apply.
By default, the same Guardium user can log in to an appliance from multiple IP addresses. You can disable concurrent logins from the same user, as described below. When disabled, each Guardium user will be allowed to log in from only one IP address at a time. If a user closes their browser without logging out, the connection will time out due to inactivity, so the user account will not be ”r;blocked” for long.
To change this setting:
Select Administration Console > Global Profile to open the Global Profile panel.
Click the Enable or Disable button (depending on the current status) to perform the desired action.
Note: When the feature is enabled, an Unlock button appears. You can click the Unlock button to allow a second user to log in with this user account, from a different IP address. This is provided for support purposes.