Deploying VA for DB2 for i

Enable a group of users to run vulnerability assessments, and configure and run the tests.

1. Use the Group Builder to create a group of users that you want to use VA. Open the Group Builder by clicking Setup > Tools and View > Group Builder. The next step uses a script for a group named gdmmonitor.
2. Run the following script on your DB2 for i system to grant privileges needed for executing VA to the group. This is done outside the Guardium system using a database native client.

   grant select on SYSIBMADM.FUNCTION_INFO to gdmmonitor;
   grant select on SYSIBMADM.FUNCTION_USAGE to gdmmonitor;
   grant select on SYSIBMADM.GROUP_PROFILE_ENTRIES to gdmmonitor;
   grant select on SYSIBMADM.SYSTEM_VALUE_INFO to gdmmonitor;
   grant select on SYSIBMADM.USER_STORAGE to gdmmonitor;
   grant select on Qsys2.Authorizations to gdmmonitor;
   grant select on SYSIBMADM.USER_INFO to gdmmonitor;
   grant select on QSYS2.SYSSCHEMAAUTH to gdmmonitor;
   grant select on QSYS2.SYSTABAUTH to gdmmonitor;
   grant select on QSYS2.SYSPACKAGEAUTH to gdmmonitor;
   grant select on QSYS2.SYSROUTINEAUTH to gdmmonitor;
   grant select on QSYS2.SYSSEQUENCEAUTH to gdmmonitor;
   grant select on QSYS2.SYSCOLAUTH to gdmmonitor;

   For IBM DB2 for i v7.1 and higher, also include the scripts:

   grant select on QSYS2.SYSVARIABLEAUTH to gdmmonitor;
   grant select on QSYS2.SYSXSROBJECTAUTH to gdmmonitor;

3. Create a JDBC connection to your DB2 for i system . Open Datasource Finder by clicking Setup > Tools and Views > Datasource Definitions, and then Security Assessment from the Application Selection menu.
   1. Click New and enter the appropriate information. For Connection Property, enter property1=com.ibm.as400.access.AS400JDBCDriver;translate binary=true.
4. Create an assessment using the Assessment Builder. Open the Assessment Builder by clicking Harden > Vulnerability Assessment > Assessment Builder.
   1. Enter a description for the assessment.
   2. Add the datasource created in the previous step by clicking Add Datasource, selecting the datasource from the Datasource Finder, and clicking Add.
      Note: You must click Apply to save the assessment before you can configure tests.
5. Add tests to the assessment by clicking Configure Tests. Click the IBM for i tab, select the tests that you want to add, and click Add Selections.
6. Click Return to go back to the Security Assessment Finder. Run the test by clicking Run Once Now, or schedule the test using Audit Process Builder. Open the Audit Process Builder by clicking, Discover > Classifications > Audit Process Builder.
7. Click View Results to view the details of all the executed tests, including recommendations for improving your score.