Data Security Community Blog

Hi everyone I'm Joan, the new Digital Community Manager, working alongside my colleagues Sarah Lamont and Seana Murray. I just wanted to share the following important document regarding ' Data Activity Monitoring (DAM) v15 Platform Changes and Planning Guidance' . This document is available for you to download here . Join us on 26th February for our webinar on 'Database Activity Monitoring (DAM) V15.3 Release Update and Roadmap 2026' . In this webinar, we will also be joined by Tal Hausman who will walk us through these platform changes. If you have any questions in the meantime please reach out and I will be happy to help. #DatabaseActivityMonitoring

Hi Community, We’re excited to announce that in January 2026 , on-premise product notifications for DSF and WAF Gateway are being updated to be part of the Thales Support Portal . This update gives you easy access to all of your product updates and information in one place: · Customize your product emails : Do you want updates daily on your favorite products, and weekly or monthly on others? Now you can adjust your email subscriptions according to the notification type, product family, and frequency that meets your needs. · View Past Notifications : Product notices are listed on the product support page, so no more searching emails for release notes or that end-of-support notification. · Easy Access to Product Information : The product support page offers links to product guides, version support, knowledge base articles, and more for easier access to the information you need most. How to Update ...

Hi Community I’m sure you are already aware but on December 1, 2023, Thales closed its acquisition of Imperva. We are excited about the possibilities ahead of us. Thales and Imperva have a shared value of putting the customer first and will lead with that customer obsession to provide the highest level of service to our customers. You can find more information here . We will continue to provide updates as we move through the integration process. For now, check out the video below for a very brief welcome message from Steve Walden , Global VP of Client Services at Thales. #AccountTakeOver #AdvancedBotProtection #AllImperva #APISecurity #AttackAnalytics #ClientSideProtection #CloudDataSecurity #CloudWAF(formerlyIncapsula) #CloudVector #ContentDeliveryNetwork #DataMasking(formerlyCamouflage) #DataRiskAnalytics(formerlyCounterBreach) #DatabaseActivityMonitoring #DDoSProtectionforNetworks #DDoSProtectionforWebsites ...

Hi Community, I wanted to bring to your attention this update posted by Imperva's Chief Technology officer, Kunal Anand. Note that each of these have been covered in our weekly Threat Intel Report, which you can find here . Please see details below... Kunal Anand , Chief Technology Officer (2 min read) There are three concurrent events of significant concern: An Anonymous Sudan group chat on Telegram has revealed imminent threats from Russia to the US financial system, specifically targeting the SWIFT network. The motive behind this attack is disruption. By attacking SWIFT and inducing potential downtime, the attackers could feasibly destabilize the financial transactions processed through this network. We’ve observed similar assaults aimed at applications, APIs, and compute services/instances in the past, primarily executed to generate disturbance and service complications. Undoubtedly, attackers are typically interested in valuable data, especially financial ...

Hi Community, I am so glad we record these sessions, because this one is GOLD for Imperva Database Activity Monitoring (DAM) users. Or any Imperva customer interested in how our consulting services can help you to get the most from your Imperva product. Be sure to catch up on this session with @Yassir Saeed , Director, Consulting Services and @Richard St John , Architect, Consulting Services to find out everything you Want to know about the health of your Database Activity Monitoring (DAM) deployment! By the end of this session, you will: Discover the quickest and most efficient way to conduct a health check on your DAM environment using Imperva's industry-leading best practices. Learn how to leverage advanced monitoring and security capabilities to ensure maximum efficiency and reliability of your solution, while getting the most out of your investment. Develop the skills needed to assess your current capacity ...

How to integrate Data Risk Analytics (DRA) with Data Security Fabric (DSF) Data is a core element for every business. There is an increasing demand to integrate systems for a better and more secure data flow. In this article, the training team provide a step by step guide on how to integrate Imperva’s Data Risk Analytics (DRA) with your Data Security Fabric (DSF). This is just one of the items covered in our Imperva training courses. Visit out training catalog or Contact training@imperva.com Integrating DRA with DSF Imperva Data Security Fabric* combines the granularity of Imperva Agent Gateways and Agents with the flexibility of Sonar Agentless auditing and insights provided by Imperva Data Risk Analytics** to form a robust and flexible solution for monitoring, auditing and reporting on your data assets across your data estate. There are two use cases when it comes to integrating DRA with DSF. The first use case is to send incidents from the DRA admin to the ...

Get Ahead with Imperva Community Imperva Community is designed to help you better achieve your goals, by providing a collaborative space to ask questions, share insights and learn from Imperva experts as well as fellow members! Our members love to hear your tips and tricks and are always keen to help others find solutions. We also have self service blogs and regular events from our Imperva experts that give you the opportunity to ask your questions directly to them. A lot of our content is for members only, so you must log in to make sure you aren't missing key updates. Here's what you could be missing: Regular live events : Ask Me Anything sessions, roadmaps, product updates etc. Video hub : Hundreds of videos on our products, best practices etc. Webinar Recordings - Catch up on any events you have missed. Discussions : Ask your questions or share your insights with other members Blog posts : Regular updates and tips from across ...

Imperva Data Security Fabric is the first data-centric solution with an integrated, proactive approach to visibility and predictive analytics. Here's Imperva SVP Terry Ray with your first look at this powerhouse product suite. #AllImperva #DataRiskAnalytics(formerlyCounterBreach) #DatabaseActivityMonitoring #jSonar

Ahead of our Data Security Roadmap 2022 webinar , I wanted to share the recent blog from Dan Neault, Imperva's SVP and GM for Data Security, to give a little insight into our Data Security Fabric. If you have any questions, comment below! We can even address them during the live session on Wednesday April 27 . Why Customers Asked us for a Data Security Fabric (Even When They Didn’t Know to ask for it by Name) Dan Neault, Imperva's SVP and GM for Data Security Our journey to the data security fabric started a while back when we built the industry’s first data security platform based on what customers said they needed and working with customers as design partners. The concept of a software platform has been around for a long time. Like all platforms, we built a stack on which applications are built (in our case security applications) – by us here at Imperva, by our customers, and by our partners. Platforms are functionally foundations, and they accelerate the time-to-value ...

Impervian Community Spotlight: Karol Gruszczyński, IT Security Expert, Trafford IT Sharing knowledge is an important part of Karol's day to day role with Trafford IT as he aims to increase awareness through conferences, workshops and right here on community! @Karol Gruszczynski is an extremely active member of the Imperva community and a real technical asset to our members. We are delighted to have him onboard as a Community Champion. “For me, the Imperva community is the place where I can help anyone who needs it, and I can learn a lot from other Imperva engineers. I hope we will meet together one day at the IMPERVA Community Champion Event and exchange the experiences.” Introducing Karol Many of our community members will already be familiar with Karol. He has been working with Imperva products for over 10 years and has provided a wealth of advice and experience on many community posts. Check out his profile to see some of his recent contributions . It is ...

Webinar Recording: Log4j, Imperva and You During this session, Stefan Pynappels, Technical Lead and Daniel Johnston, Research Manager take us behind the scenes of Imperva and the Log4j vulnerability, discussing the who, what, when, where and whys of what was a tumultuous period of rapid change and development for the industry as a whole. They look back at the analysis and steps taken by our Threat Research and Technical Support teams to protect our customers from the threat posed by this widespread vulnerability. From analysis to mitigation and what we have learned, this will be a conversation that will aim to address some of the most frequently asked customer questions on Log4j, as well as looking at how we push updates to customers; how we provide them with up-to-date information and the importance of ADC feeds and Support Portal Access. Have a question? Post it below or start your own discussion . #log4shell #log4j #attacks #Cybersecurity #mitigation ...

Imperva Up2date: The Log4j Exploit and the call for Runtime Protection (RASP) Josh Hogle, Sr Technical Marketing Engineer. Log4j is a popular logging framework maintained by the Apache Software Foundation, which is used in almost every Java-based commercial and open-source application around the world. In December of 2021, multiple zero-day vulnerabilities involving remote code execution were discovered in the log4j package. The primary vulnerability, dubbed Log4Shell, allows a hacker to place a specially crafted LDAP or JNDI string in an HTTP header or request, which when logged using the log4j package, can trigger a request to download malicious code and execute it on the target machine. Payloads can be anything from ransomware, which fully encrypts a vulnerable server, to data-stealing malware to anything in between. Because log4j is so pervasive in Java-based applications, virtually every organization is at risk. In this demo, we have 4 servers: a simple ...

Continuing to Stay Ahead of CVE-2021-44228: Addressing Your Top Questions Kunal Anand, CTO Since it was disclosed on Friday, December 11, I have spoken with many customers about CVE-2021-44228 and the ways Imperva is working to ensure that they are protected . Countless others have contacted us with questions about ways to mitigate the impact from the Log4j vulnerability. In the spirit of transparency and information sharing, we’ve aggregated below the most common questions we’ve received to date and the answers we’ve been providing to assist our customers through this time. This is a complex and evolving situation -- one that takes partnership, diligence and patience. The global Imperva team is dedicated to helping you. We will continue to keep you informed with additional information as it becomes available. Q: What is the state of Imperva’s Application Security product posture? A: Imperva Cloud Web Application Firewall (WAF), Imperva WAF Gateway and ...

How We’re Protecting Customers & Staying Ahead of CVE-2021-44228 Kunal Anand , Nadav Avital Dec 10, 2021 2 min read CVE-2021-44228 is a high profile vulnerability impacting multiple versions of a widely distributed Java software component, Apache Log4j 2. The specific vulnerability allows for unauthenticated remote code execution. For additional technical information, the team at LunaSec has an excellent technical writeup on their blog . In terms of magnitude, this will without any doubt, have a big impact on all organizations running Java workloads. Similar to other common vulnerabilities and exposures (CVEs) in its class (referring to those affecting Struts 2 back in 2017), best practices require security teams to immediately patch their software and upgrade third-party components to meet SLAs. In the spirit of transparency, we want to give everyone a succinct update on how Imperva responded ...

Hi Community, Have you noticed a few changes around here? I am delighted to announce the launch of our new video hub - exclusively available to community members! We have been hard at work this year building out an on-demand video library for you to browse and search--we’re currently at just over 250 titles, with new titles added each month! We know how busy you are, so you'll find lots of micro-video content designed to answer your key questions in just minutes, helping you get the most from your Imperva products. One of the new videos you’ll find there is our first " Community Catch Up "! Check it out below... Each month I’ll be sharing a short update video to give you a heads up on key events and content here in Community. You’ll find links to everything Catch-Up below. Insider tip: Don’t forget to log in!* Some of our content--including our new video hub-- is for Community members only ! So, what are you watching? ...

How to navigate the chaotic world of personal privacy rights regulations. When it comes to personal privacy rights laws, not knowing where all of your sensitive data is can be costly, time-consuming, and could have a significant impact on your brand and reputation. During this webinar, Jim Coalwell, Senior Product Manager, examines how Imperva is helping our customers find data they didn't know they had and how to avoid some of the pitfalls of complying with personal privacy rights regulations. The session ends with a Q&A so that Jim can answer live questions #CloudDataSecurity #AllImperva #jSonar #Dataprivacy #Webinar

In our previous blogs, I have described several Data Risk Analytics (DRA) integration use cases and how to configure and use the Syslog. In this final blog I discuss the DRA API and how it can be used. The cool thing about APIs is that you can provide configuration and entry points to the DRA from other systems (as you have seen in the use cases examples) and the even cooler thing is that you can actually enhance your experience by adding extra functionality that currently doesn’t exist. Let’s dive deeper into the subject. API Security DRA APIs use secure communications. Client and DRA communicate via encrypted traffic using certificate trust (SSL). Requests coming from the clients are served only if they are from authorized users configured in customer Active Directory (AD) server. Each request must have valid credential per HTTP Basic Authentication method , as described in Figure 1. The format of the basicAuth string the combined DRA ...

In the previous blog , I have described several Data Risk Analytics (DRA) integration use cases. In this blog I will dive deeper into how you can integrate your DRA with Syslog. DRA can send Syslog messages to products that use Syslog. For example: SIEM, SOAR, ELK and others. There are several options that can be configured based on your operational/business requirements including the target server, message format and what you actually want to send. Syslog server target You need to configure the target to which messages will be sent. This includes the IP, Port, Protocol (UDP/TCP) and facility. It is recommended that once you configure the Syslog server setting you test the connection by pressing the ‘Send Test Syslog Message button. As seen in figure 1. Events to be sent After configuring the Syslog server, it is time for you to decide which event types to send by choosing ‘Breach Detection’ and/or ‘Risk Reduction’ class (these classes can be ...

As the cybersecurity industry matures and modernizes, security products are required to integrate with a wider range of products within the customer ecosystem, this is also true for the Imperva Data Risk Analytics (DRA) product. We see more and more customers that want to use external products to manage the DRA incidents and in some cases do not even provide direct access to the DRA GUI to their users. Based on these requirements Imperva invested even more into functionality development so that DRA will have the ability to integrate it into different processes using modern devops and automation methods, mainly Syslog and APIs. This first blog will describe 7 key use cases from our customer base. Later blogs in this series will provide more technical details on how it is actually done. Use Case 1: Incident management and investigation by the SOC team In this use case DRA sends incidents to the SOC SIEM system. The SOC engineer is solely responsible for handling ...

The Imperva Community welcomed , Imperva Customer Success Manager , to discuss how to integrate Data Risk Analytics (DRA) into your eco-system using API and Syslog. Modern eco-systems are very complex and have multiple products that interact with each other to increase productivity through automation and devops processes. In this technical session you will see several examples of how customers integrate DRA using Syslog and APIs. You will understand how to configure DRA and see an example of how DRA API was used to enhance the DRA capabilities. Got a question? Ask it below or start a new thread by posting it here . ​ #DataRiskAnalytics(formerlyCounterBreach)