IBM Support

IBM Security Guardium: DB hitting port 16022 constantly on a Collector

Question & Answer


Question

Why is database hitting port 16022 constantly on a Collector?

Cause

Port 16022 is used by the Universal Feed in case of File Activity Monitoring (FAM). All file activity events are sent to the Guardium system over this port from the IBM Security Guardium Common services.

Answer

FAM is closely integrated with Guardium STAP. In version 10.0, FAM is enabled by default, because of which it always try to connect. Even if you do not use FAM, you will see hits on port 16022.
So, if there is no FAM policy in place, it is actually not doing anything.

for information on how to install FAM service, please refer to the Related Information section below.

[{"Product":{"code":"SSMPHH","label":"IBM Security Guardium"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Guardium Appliances","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF010","label":"HP-UX"},{"code":"PF016","label":"Linux"},{"code":"PF027","label":"Solaris"}],"Version":"10.0;10.0.1;10.1","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
16 June 2018

UID

swg21991687