IBM Security Guardium Data Protection Reviews

Guardium is easily integrated with other IBM solutions, a significant advantage and a key reason we chose Guardium. Both platforms share the IBM infrastructure, enhancing compatibility and integration. Additionally, Guardium offers a vulnerability analyzer, which is another compelling feature of the platform.

The first implementation of the solution in our company was carried out in 2011. The use cases for the solution may vary from customer to customer, but majorly the product is used for compliance and ensuring the privileged users are properly monitored and audited.

For example, our company has used the tool for masking activities. The basic objective of the solution remains to ensure the ideal monitoring of service accounts and detect suspicious activities, which help our company block suspicious activities. In our organization, IBM Security Guardium Data Protection is used on a highly expensive server. The product implements real-time data monitoring. 

One of the customer's major concerns is monitoring local users; installation of the agent is necessary. Once the agent is installed on the DB, users expect the server to operate without crashing or restarting. The maturity of the agent is the most valuable feature of the solution. 

I believe IBM Security Guardium Data Protection has been available since 2004, so it has become a mature product. In our organization, we would recommend IBM Security Guardium Data Protection as the top product to others, wherever database security is concerned. I would overall rate the solution an eight out of ten. I believe the solution must be upgraded further in accordance with emerging technologies such as AI.  

We use it for monitoring database activity. This includes tracking databases such as MySQL, Oracle, and others. It monitors activities such as logins and logouts, capturing whether they were system or user logins. It also records the execution of scripts and the details of each script run. Additionally, it performs vulnerability assessments on databases and can enforce database lockdowns.

It can help with PCI compliance. It includes features like data masking, especially during queries, which supports compliance efforts. The tool also performs compliance and audit checks and allows auditors to generate ad hoc compliance reports. This helps guide organizations on areas for improvement.

Before IBM Guardium Data Protection, we didn't have any solution. We wanted to check our database activities, for example, admin activities, so with IBM Guardium Data Protection, we created some use cases and also wanted to check up on the use cases in our environment, so we deployed the solution. Right now, we have three or four use cases for IBM Guardium Data Protection: creation, table deletion, and making changes to the table, and we receive alerts when any of those activities happen.

IBM Guardium Data Protection improved our organization by providing visibility into our database functions. Before using the solution, we didn't have that visibility until we took the data logs and integrated them. We didn't have visibility into database bots. We didn't know which users or admin users were able to get into the databases even without specific privileges. Now, with IBM Guardium Data Protection, we have visibility into all details by just collecting the logs on the aggregator, then integrating the aggregator and team logs, so our security analysts can check all the user logs and use cases we created to monitor databases, and view them all on a single screen. IBM Guardium Data Protection gave us one console for monitoring data, so we won't have to look at more than one screen or use other monitoring solutions.

We use IBM Security Guardium Data Protection to monitor our databases.

It helps us with the visualization of the data and to monitor our databases. We also use it to send the logs to QRadar. For our organization, it has been very helpful in locating and discovering sensitive information in the databases. This function is vital for us.

I use it for the likelihood of incident response, intrusion prevention, intrusion detection, and malicious traffic.

I like the reporting mechanism. It's very good.

We use this product to protect our information. It provides the added feature of including some protective marking rules on the data. Security is the overall high-level objective for us using this solution. We are customers of IBM and I'm a tech lead.

If anyone is trying to access unauthorized data, it sends out an immediate alert to those concerned.