---
title: APPENDIX 1: System Config Manager Parameters
slug: kron-dam-reference-guide-3-8-0/appendix-1-system-config-manager-parameters
docTags:
createdAt: 2025-07-17T09:14:38.209Z
---
| **Parameter Name** | **Description** | **Sample Parameter Value** | **Restart Required** |
| ------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------- |
| **sql.proxy.bind.port** | This parameter defines the port range for auto-assigning sql.proxy.bind.port parameter | 1025-2000 | No |
| **sql.proxy.node.auto.register.enabled** | Enables automatic registration of Oracle RAC nodes in SQL proxy | True | No |
| **dam.ddm.mfa.enabled** | Enables Multi-Factor Authentication for SQL Proxy connections. | True | No |
| **dam.ddm.mfa.delimiter** | Defines the delimiter separating the MFA code from the username. | # | No |
| **sql.proxy.metadata.sync.period** | Sets the interval (in ms) for synchronizing database metadata. | 30000 | Yes |
| **dam.ddm.server.clone.enforce.user.role** | Forces read-only access for users connecting via the cloned port. | readonly | No |
| **dam.ddm.server.enforce.user.groups** | Defines user groups required to connect via the main SQL proxy port. | UG1, UG2 | No |
| **dam.ddm.server.clone.bind-port** | Specifies the port for read-only SQL Proxy access. | 1000-4000 | No |
| **dam.ddm.server.clone.enforce.user.groups** | Defines user groups required to connect via the read-only port. | UG3,UG4 | No |
| **sql.proxy.user.swap.enabled** | Enables user identity swapping for SSO in SQL Proxy connections. | True | yes |
| **aioc.second.password.ttl** | Defines TTL for the second password in SSO (in days). | 30 | yes |
| **sdd.thread.count.default** | Sets the default number of parallel connections for sensitive data discovery. | 10 | no |
| **dam.ddm.buffer.overflow\.attack.protection** | Turns on the proxy’s buffer-overflow guard. When enabled, every incoming SQL packet is measured and—if it exceeds the size limit below—immediately dropped and logged. | True | yes |
| **dam.ddm.buffer.overflow\.limit** | Maximum statement size (bytes). Queries larger than this are blocked. Choose a value that covers normal traffic (e.g., 1048576 = 1 MiB). | 1048576 (1 MiB) | yes |
| **dam.ddm.dos.attack.protection** | Activates DoS / query-flood detection and throttling. Uses the two rate-limit thresholds that follow. | True | yes |
| **dam.ddm.query.rate.limit.from.single.ip** | Per-client threshold—max. queries per second allowed from one source IP before it is temporarily black-listed. | 100 | yes |
| **dam.ddm.query.rate.limit.from.all.network** | Global threshold—aggregate queries per second across the proxy. Exceeding it rejects new sessions until the rate falls. | 5000 | yes |
| **sql.proxy.oracle.local.bind.port.tenant\_aioc** | This parameter defines port number of Oracle devices. All Oracle database connections are made through this port. For multitenant environments, the tenant’s name should be entered instead of the aioc. | 5000 | NO |
| **device.database.source** | This parameter defines the external device database IP addresses. Multiple values must be separated by “;”.
The parameter is used to add/discover devices from external device databases. | E.g: 10.10.10.10;20.20.20.20 | NO |
| **device.database.url\_n** | JDBC URL address for database connection.
The parameter is used to add/discover devices from external device databases. | E.g: device.database.url\_0 = jdbc\:postgresql://10.10.10.10:5432/databasename | YES |
| **device.database.user\_n** | External database username.
The parameter is used to add/discover devices from external device databases. | E.g.: DB\_1 | YES |
| **device.database.password\_n** | External database password.
The parameter is used to add/discover devices from external device databases. | must be set as "yes" | YES |
| **device.database.sql\_n** | SQL Query to import devices. IP address, hostname, element type specifier, and one of the tag values are mandatory.
The parameter is used to add/discover devices from external device databases. | E.g: device.database.sql\_0 = SELECT "dynName" AS IP\_ADDRESS, server AS HOSTNAME, os AS ELEMENT\_TYPE\_SPECIFIER , id AS PORT, os as TAG\_OS, site as TAG\_SITE FROM devicedatabase | YES |
| **device.database.driver\_n** | Database driver for external database connection.
The parameter is used to add/discover devices from external device databases. | E.g.: device.database.driver\_0 = org.postgresql.Driverdev | YES |