Symantec Access Management

 View Only
  • 1.  Advanced Authentication -- DROP TABLE detected

    Posted Apr 03, 2020 04:01 AM
    Hi Team,

    Our security team has detected suspicion audit event on Advanced Authentication (arcot) MSSQL Database -- "DROP TABLE ARTT_42".

    Anyone knows what might cause this event to trigger?



    Thank You.


  • 2.  RE: Advanced Authentication -- DROP TABLE detected
    Best Answer

    Broadcom Employee
    Posted Apr 03, 2020 10:29 AM
    For reporting purpose we create temporary tables by the name you saw and it is for the session and when the report is run, it is not created any other time, once the report is run and Administrator does a sign out the table is dropped.
    Let me know if it answers the questions.


  • 3.  RE: Advanced Authentication -- DROP TABLE detected

    Posted Apr 06, 2020 04:06 AM
    Hi Namish,

    Thanks for your feedback.

    Just for clarity.  You mean that the temporary table ARTT_* is created when user login into CA AA Admin Login and running report using the "Reports" function? 

    Does it include all reports or only specific report(s) only?

    You mentioned that the temporary table (ARTT_*) be dropped when user sign-out.  Does the temporary get dropped in timeout situation?


    Thank you.