立即与支持人员聊天
与支持团队交流

Classification Module 6.1 - What's New

Collection Details

Previous Next

Improved Performance when Collecting Security for Governed Resources : Collection Details
The Data Governance Server acts as an intermediary between the agents and the databases where information is stored. It coordinates all agent deployments and communication, and manages the collection of security index data for each managed host. Based on a schedule, the server queries the agents for the detailed security for all governed resources and any child resources that have explicit security.

Collection Schedule

Previous Next

Improved Performance when Collecting Security for Governed Resources : Collection Schedule
The Data Governance Server attempts to spread the collection of detailed security out over time to provide load balancing for the server host computer and the Identity Manager central database. The algorithm used to schedule this collection is as follows:
Every 5 minutes the server determines the 5 managed hosts who have not had their security information collected over a certain period.
The server queries the database for a list of all governed resources for each of these managed hosts and executes security queries to the agents scanning these hosts.
As the results of these queries are returned to the server, the data is stored in the Identity Manager central database.
To increase performance, you can customize the algorithm with the following settings:
•
The cycle time that controls how often the server looks for managed hosts that need to have detailed security queried can be controlled with an App.Config setting called ‘CollectionCycleFrequency’. This value is in minutes. (Note: This period must be at least 6 hours).
•
The number of managed hosts to be queried for detailed security data at once can be controlled by the App.Config setting ‘CollectionBatchSize’.
•
The minimum period between collections for a particular managed host can be controlled with an App.Config setting called ‘MaxUpdateFrequency’. This value is in minutes.

Child Resources

Previous Next

Improved Performance when Collecting Security for Governed Resources : Child Resources
In addition to collecting directly applied security information for governed resource, the Data Governance Server also retrieve security information on any children of these governed resources where the child’s security differs from the parent. This allows detailed policies to be authored in Data Governance Edition such as, “The Everyone SID should not have Full Control permissions under any of my governed resources”.
For security policies and attestations, the system only needs to track the child resources with explicit permissions (directly applied) and not the complete set of child resources below a governed resource.

Resource Activity Compression Utility

Resource activity tracking is available for locally managed Windows servers, SharePoint farms, and supported NetApp and EMC remotely managed hosts. It is used to collect data on identities, reads, writes, creates, deletes, renames and security changes on securable objects. This information is required for several report types, including the Resource Activity report. The Data Governance activity database stores resource activity information.
To ensure that activity data remains manageable and usable administrators need a way to control the growth of activity in their database. For managed hosts with Resource Activity enabled, you can exclude selected accounts, file extensions, and folders, to be scanned by agents depending on the type of managed host. For example, you can select to exclude service accounts as their activity typically would not require tracking. (For details, see the Data Governance Edition User Guide section on Adding Managed Hosts and managing exclusions).
The Activity Compression utility can also be used to further manage the database. It enables the compression of activity from multiple rows into a single row in the database.
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级