DataSunrise_Database_Security_Release_Notes
DataSunrise_Database_Security_Release_Notes
com
Release Notes
ii
Contents
Version history......................................................................................................7
DataSunrise 10.2 features............................................................................................................................... 7
DataSunrise 10.1 features............................................................................................................................... 7
DataSunrise 10.0 features............................................................................................................................... 7
DataSunrise 9.3 features................................................................................................................................. 8
DataSunrise 9.2 features................................................................................................................................. 8
DataSunrise 9.1 features................................................................................................................................. 9
DataSunrise 9.0 features................................................................................................................................. 9
DataSunrise 8.4.0 features............................................................................................................................ 10
DataSunrise 8.3.0 features............................................................................................................................ 10
DataSunrise 8.2.0 features............................................................................................................................ 11
DataSunrise 8.1.0 features............................................................................................................................ 11
DataSunrise 8.0 features............................................................................................................................... 12
DataSunrise 7.4.0 features............................................................................................................................ 12
DataSunrise 7.3.0 features............................................................................................................................ 12
DataSunrise 7.2.0 features............................................................................................................................ 13
DataSunrise 7.1.0 features............................................................................................................................ 13
DataSunrise 7.0 features............................................................................................................................... 14
DataSunrise 6.5.0 features............................................................................................................................ 14
DataSunrise 6.4.0 features............................................................................................................................ 14
DataSunrise 6.3.1 features............................................................................................................................ 15
DataSunrise 6.3.0 features............................................................................................................................ 15
DataSunrise 6.2.0 features............................................................................................................................ 16
DataSunrise 6.1.0 features............................................................................................................................ 16
DataSunrise 6.0.0 features............................................................................................................................ 16
DataSunrise 5.7.0 features............................................................................................................................ 16
DataSunrise 5.6.0 features............................................................................................................................ 17
DataSunrise 5.5.0 features............................................................................................................................ 17
DataSunrise 5.4.0 features............................................................................................................................ 18
DataSunrise 5.3.0 features............................................................................................................................ 18
DataSunrise 5.2.1 features............................................................................................................................ 18
DataSunrise 5.2.0 features............................................................................................................................ 19
DataSunrise 5.1.0 features............................................................................................................................ 19
DataSunrise 5.0.0 features............................................................................................................................ 19
DataSunrise 4.4.0 features............................................................................................................................ 20
DataSunrise 4.3.0 features............................................................................................................................ 20
DataSunrise 4.2.4 features............................................................................................................................ 20
DataSunrise 4.2.3 features............................................................................................................................ 21
DataSunrise 4.2.2 features............................................................................................................................ 21
DataSunrise 4.2.1 features............................................................................................................................ 21
DataSunrise 4.2.0 features............................................................................................................................ 21
DataSunrise 4.1.1 features............................................................................................................................ 22
DataSunrise 4.1.0 features............................................................................................................................ 22
DataSunrise 4.0.4 features............................................................................................................................ 22
iii
Elasticsearch
Issue number Description
- AWS is not fully supported
- Depersonalization in Painless scripts, Expression scripts, Mustache scripts, Java scripts is not fully
supported. Operation types can't be identified.
- GZIP is supported but operation types can't be identified.
1 DataSunrise Database Security 11.0 | 5
IBM DB2
Issue number Description
1341 Processing of encrypted traffic when using DRDA is not supported.
1344 Processing of operations with procedures and functions written in non-SQL languages (Natural
languages) is not supported.
1634 Federated databases are not supported.
1576 XQuery is not fully supported
MongoDB
Issue number Description
4837 MongoDB 4 is not fully supported. The following features are not supported: multi-document
transactions, new type conversion operators, new string operators, aggregation trigonometry
expressions, aggregation regular expressions (regex) operators, new aggregation pipeline stages, change
streams functionality (not tested).
3155 Audited dates are stored in raw format.
- Operations used in a session which was created after the session the operations had been created in, can't
be tracked.
MySQL
Issue number Description
481 User-defined variables cannot be used to create prepared statements identifiers.
858 HandlerSocket protocol is not supported.
1261 NDBAPI and communication protocol is not supported.
1446 Query row encoding syntax is not supported.
7414 XProtocol NoSQL features are not fully supported.
Oracle Database
Issue number Description
7760 Native encryption doesn't work for a newly-created users.
1 DataSunrise Database Security 11.0 | 6
SAP Hana
Issue number Description
7627 The Core fails because of erroneous queries performed.
Teradata
Issue number Description
2095 CLOB auditing is not available.
492 Sniffing is not supported. Can't read user name.
Masking
Issue number Database Description
- - Queries included in EXECs can't be masked. Starting from DataSunrise 6.5.0, masking
of EXEC-included queries works for PostgreSQL and MySQL
Metadata processing
Issue number Database Description
572 - Empty system tables are created in metadata when creating a new database
UI
Issue number Database Description
4098 - Filtering by operations is implemented for some databases only
2 Version history
This subsection contains information about previous versions of DataSunrise.
3. Additional Machine Learning functionality for OCR Data Discovery was implemented to recognize ID documents with
MRZ codes (e.g., passports, visas, ID cards) and credit cards (see the OCR Data Discovery subsection of the User Guide).
4. The Hide Objects Dynamic Masking method was implemented for DynamoDB (see the Creating a Dynamic Data Masking
Rule subsection of the User Guide).
5. The Synthetic Data Generation Periodic Task was enhanced (see the subsection Synthetic Data Generation Task of the User
Guide).
6. Dynamic Masking based on user-specified Information Types was implemented, available for MySQL and PostgreSQL-like
databases (see the Creating a Dynamic Data Masking Rule subsection of the User Guide).
Other features
7. A Dormant Users Report type was added to generate a list of database users who had not logged in for a specified period
(see the Creating Custom Reports with the Report Generator subsection of the User Guide).
8. Dynamic Masking performance was improved (see the Configuring DataSunrise for Masking with random-based methods
subsection of the User Guide).
10. The ability to download core dumps generated by DataSunrise was implemented (see the Servers subsection of the User
Guide).
11. A Data Discovery Speed Test was introduced to estimate completion time for tasks, available only for Amazon S3 tasks
with Inventory mode enabled (see the AWS S3 Crawler subsection of the User Guide).
2. Implemented a Random subset (Randomized scanning) functionality for Data Discovery. This feature is particularly
useful for discovering sensitive data across large volumes of data hosted on AWS S3. Scanning random portions of data
significantly speeds up the Data Discovery process (refer to section "Randomized Data Discovery" of the User Guide).
3. Added the ability to split and rerun failed batches (failed Data Discovery tasks) when performing Multiprocess Data
Discovery on AWS S3 buckets.
4. Created a Helm chart (a dedicated package) for installing and running DataSunrise on Kubernetes. This makes it easier to
deploy and manage DataSunrise in containerized environments.
Other features
5. Implemented functionality to clean audit results collected by Trail DB Audit Logs for PostgreSQL databases.
6. Using information collected by AWS S3 Inventory for Data Discovery across AWS S3 buckets is now supported. AWS
Inventory stores metadata of a “source” AWS S3 bucket in the form of an archived CSV file. To reduce traffic consumption
and operation cost, DataSunrise now can get S3 metadata with the help of Inventory instead of using AWS API calls. The
process is based on a dedicated Data Discovery Task called Crawler (see Subs. "AWS S3 Crawler" of the User Guide)
Other features
7. The Parquet file format is now supported when performing Data Discovery across AWS S3 buckets. Now you can search
for sensoitive data in Apache Hive data storage in AWS S3.
8. Snowflake web proxy implemented. Snowflake web interface now can connect to a Snowflake database through a
DataSunrise proxy to enable blocking and masking Rules work. For example, you can access your database through
DataSunrise proxy by the following address: https://<DS_Host>:7778/ instead of the former one such as https://
<Account_ID>.<Region>.azure.snowflakecomputing.com.
Important: the list of Oracle grants required for getting database metadata was updated which may cause backward
compatibility issues. Refer to subs. 5.2.1 "Creating an Oracle Database User" of the User Guide for the new list of grants.
1. Implemented Audit DB Trail based on XML files for Oracle and PostgreSQL: a target database collects and saves audit data
in XML files that can be read by DataSunrise when performing data audit. First and foremost, this feature is to be used for
Amazon RDS databases because DataSunrise doesn't support sniffing on RDS. See subs. 9.8.2 and 9.8.4 of the User Guide.
2. Implemented new Report Generator tasks: reports on proxy status and reports on direct connections. Proxy status report task
creates a CSV or PDF report on status of all existing proxies, sniffers and Audit DB trails. Report on direct connections task
creates a PDF which notifies you about direct connections established between client applications and your target database
bypassing your DataSunrise proxies. See subs. 11.3.2 of the User Guide
3. Implemented extraction of random entries from a target database when executing a Data Discovery task. This enables you
to get a more precise picture of sensitive data stored in your database. See subs. 11.2.3 of the User Guide.
Other features
4. Improved Dictionary operation mechanisms when using an MS SQL database as a Dictionary.
5. Improved support of Oracle connection pool when migrating sessions are available.
7. Added System Events reports to the Report Gen. Refer to subs. 8.3.2 of the User Guide.
8. Added Teradata loader for Static Masking. Refer to subs. 8.1 of the User Guide.