Data Loss Prevention

 View Only
  • 1.  Problems running a Network Discover scan on Oracle

    Posted Jul 25, 2012 12:06 AM

    This is on Network Discover 11.1 + Enforce 11.1

    Ok I succesfully setup a Network Discvoer this afternoon against several MS SQL servers after installing the correct jdbc driver...  However I'm having issues configuring an Oracle Discover scan.

    I've followed the syntax as described in the Symantec DLP 11.1 Admin Guide.  oracle:@//oracleserver.company.com:1521/mydatabase for my syntax

    At first I was receving an error message about not being able to connect to the listner service but got that quickly figured out...

    Now the scan runs terminates with 0 bytes scanned and 0 seconds used.  These databases have several million rows in them so not sure what I'm missing, maybe a user rights issue or something?  Though the admin guide doesn't state directly what access rights are needed by the SQL user being used.

     

    Unless there is a different user syntax or something.



  • 2.  RE: Problems running a Network Discover scan on Oracle

    Broadcom Employee
    Posted Jul 25, 2012 08:39 AM

    At least, you need a user with read access rights to scan the Oracle DB.

    But, it is strange that, if you configure as a user that have no read rights, there should be an error message indicate that.

    Any way, you should check your DB user rights firstly.



  • 3.  RE: Problems running a Network Discover scan on Oracle

    Posted Jul 25, 2012 09:03 AM

    I'm actually in the middle of working through Oracle scans now too. Have you looked at the logs to see what actually happened during the scan? Yang is correct, the user need SELECT rights for the database and tables. That may be something to ask the DBAs there. I was having that issue with our scans when we started.

    Check the Discover server log called, ScanDetail-<scan_name>.log for some clues as to what is going on.

    Aaron