Within the SQL Proxy module, users are required to create a reservation when attempting to connect to a database. This reservation specifies the time frame for access and must be approved by a manager.

Steps to Create a Connection Reservation:

: The policy group must contain approval definitions. First, create an Approval Workflow that indicates what to do if some kind of reservation is created. Navigate to Policy > Approval Workflow then click the Add button.

: Users must log in to the DAM interface. Specific user groups, such as MSSQL user groups, may exist, and members of these groups are required to obtain approval from a manager before accessing databases. 

: Users create a reservation by selecting the target database and specifying a "Reason" for the connection. For example, users may need to perform tasks such as creating tables or retrieving data. This reason is communicated to the manager for approval. Navigate to Devices > Reservation and create a reservation.

: The manager reviews the reservation request, which includes details such as the user’s name, the target database, and the reason for the request. The manager may approve, reject, or ignore the request. Without approval, the user will not be able to connect to the database. User Manager needs to be navigated to Dashboard page and approve the request in ‘My Approvals’.

Once the reservation is approved, the user is allowed to connect to the database within the specified time frame. During this session, additional policies may govern the queries that can be executed.

Connection Reservation and Approval

Query Approval and Management

Logging and Auditing

Connection Reservation & Command Approval

3.8.1 User/Device/Policy Definition

Dynamic Data Masking

Oracle RAC Configuration

Hive - Zookeeper Configuration

Connecting with the Kron DAM SQL Proxy

Read-Only Mode on SQL Server

SQL Proxy

Session Logs

Query Logs

Active Sessions

Database Session Logs and Activity Views

Kron DAM with Azure SQL Database

Creating a Notification Target

Defining an Alarm Policy (cloned)

Defining an Alarm Policy

Database Alarm

Kron DAM Configuration for Connection of ML-Based Threat Analytics and Response Engine

ML Engine Endpoint Configuration

Threat Analytics Dashboard and Investigation

Kron DAM Configuration for Threat Threshold Incident Response

Anomaly Actions

Detected Risk Scores

Threat Analytics and Response Engine Configuration

User and Entity Behavior Analytics

SQL Proxy Configuration for SSO

Device Group Configuration in SSO

Configuring SSO Token Generation for Oracle and MSSQL Databases

Establish Connection to Database with SSO

Single Sign-On (SSO)

Creating a Vault Account

Vault Password Checkout

Associating a Vault Account with a Database Device

Add Vault Account

Denial-of-Service (DoS) Protection

Connection Rate Limit

Database Packet Rate

User Packet Rate

Buffer Overflow Attack Protection

DAM Object Explorer Usage

DAM Object Explorer

Creating Data Types 

Bulk Data Type Import

Data Discovery

Schedule Discovery

Data Regulatory Standards

Data Dictionary

Excluded Column Data Types

Applying Masking from Scheduled Discovery Results

Sensitive Data Discovery

Database Audit Report

Vulnerability Scanner Report

Reports

Permit Zone

Database Discovery

Adding Function Groups

Adding Function Realms

Menu Lists Management

APPENDIX 1: System Config Manager Parameters

APPENDIX 2: SQL Proxy Application Properties

Reference Guide