The Kron PAM SQL Proxy feature can log SQL sessions and restrict users’ privileges, such as blocking queries and masking data during sessions. This proxy feature is made available by applying the configurations in the following chapters.

Learn about the Kron PAM SQL Proxy feature in this informative document, which explores how it enables SQL session logging and user privilege control. Discover how to configure the proxy feature to block queries, mask data, and enhance security measures f

Adding SQL Users

Creating User Groups

Adding Device Groups

Adding a Database as a Device

Creating a SQL Policy

Creating a Policy Group

Creating a Policy Realm

User/Device/Policy Definition

Creating a Masking Method

Creating a Masking Policy

Dynamic Data Masking

Oracle RAC Configuration

Modifying the /etc/hosts File for Zookeeper Nodes

Adding Zookeeper as a Device

Connecting to Zookeeper via Kron DAM SQL Proxy

Hive - Zookeeper Configuration

Connecting with the Kron DAM SQL Proxy with MFA

Connecting with the Kron DAM SQL Proxy

Configuring Kron DAM for Read-Only Access

Configuring SSMS for Read-Only Connections

Read-Only Mode on SQL Server

SQL Proxy

Session Logs

Query Logs

Active Sessions

Database Session Logs and Activity Views

Kron DAM with Azure SQL Database

Creating a Notification Target

Defining an Alarm Policy

Database Alarm

Kron DAM Configuration for Connection of ML-Based Threat Analytics and Response Engine

ML Engine Endpoint Configuration

Threat Analytics Dashboard and Investigation

Kron DAM Configuration for Threat Threshold Incident Response

Anomaly Actions

Detected Risk Scores

Threat Analytics and Response Engine Configuration

User and Entity Behavior Analytics

SQL Proxy Configuration for SSO

Device Group Configuration in SSO

Configuring SSO Token Generation for Oracle and MSSQL Databases

Establish Connection to Database with SSO

Single Sign-On (SSO)

Creating a Vault Account

Vault Password Checkout

Associating a Vault Account with a Database Device

Add Vault Account

Connection Reservation and Approval

Query Approval and Management

Logging and Auditing

Connection Reservation & Command Approval

Denial-of-Service (DoS) Protection

Connection Rate Limit

Database Packet Rate

User Packet Rate

Buffer Overflow Attack Protection

DAM Object Explorer Usage

DAM Object Explorer

Creating Data Types 

Bulk Data Type Import

Data Discovery

Schedule Discovery

Data Discovery with Standards

Managing Data Standards and Data Types

Data Regulatory Standards

Adding a Data Dictionary

Scheduling a Discovery Using Data Dictionary

Viewing and Managing Discovery Results

Data Dictionary

Excluded Column Data Types

Applying Masking from Scheduled Discovery Results

Sensitive Data Discovery

Report Details

Dashboard

Database Local Account Security Reports

Database Audit Report

Vulnerability Scanner Report

Reports

Permit Zone

Database Discovery

Adding Function Groups

Listing and Exporting Realms

Adding Function Realms

Menu Lists Management

APPENDIX 1: System Config Manager Parameters

APPENDIX 2: SQL Proxy Application Properties

Data Access Manager

3.8.1 Kron PAM Web GUI

License Manager

Email Server Configuration

Language Settings

System Configuration Parameters

Enabling Push Notifications for Kron PAM Mobile Client Application

Enabling HTTPS on the Kron PAM Web GUI

Backup Management

Log Management

SAML Authentication

Hardware Security Module (HSM) Integration

Windows Authentication on the Kron PAM GUI

PKI Authentication

SMS Configuration

Logo and Background Customization

Multitenancy

Kron PAM Administration

Manual User Creation

Kron PAM Users Search

User Actions Menu

Editing Kron PAM Users

Editing User Properties

Temporary User

Local User Bulk Import

New User Request

Force New User to Change Password 

User Password Strength Settings 

User Password Hash Algorithm Settings

Notifying Inactive Users Before Lock

LDAP/Active Directory Integration

Microsoft Entra ID Integration

User Group Creation

Assigned Credentials

SSH Keys Manager

User Management

Element Type

Device Groups

Device Inventory

Device Management

Policy Key Creation

Policy Groups Creation

Device Realm Creation

Policy Tracking

Policy Management

Managerial Approval for Connections 

Managerial Approval Connection Reservation

Managerial Policy Reservation

Managerial Approval for Commands

Managerial Approval in Shared Account Password Manager (Vault)

Approval Workflow

Approval Workflow SMS Settings

Approval Management

SSH Proxy

RDP Proxy

HTTP Proxy

Advanced Authorization Methods

OT/ICS Session Manager

Session Manager

Password Vault

Application Token

Audit

Vault Agent

Secrets

Sending the MFA QR Code to Users

Creating a Connection Between Kron PAM and the Kron PAM Mobile Client Application

Enabling Multi-Factor Authentication (MFA)

Using MFA to Log in to the Kron PAM Web GUI

Using MFA to Log in to the Kron PAM Desktop Client

Using MFA for SSH Connections

Using MFA for RDP Connections

Using MFA for SSH Proxy

Using MFA for HTTP Proxy

Using MFA for SFTP Proxy

Using MFA for TACACS+ Manager

Using MFA for Radius

Using MFA for Kron PAM Mobile Client Application

Using MFA for Remote Privileged Access Management

Offline Mode Settings

Using SMS for MFA

Using E-mail for MFA

User Token Management

Using Hardware Tokens for MFA

Using Authentication Key (FIDO Key) for MFA

Using Keystroke for User Behavior Analytics

MFA Configurations for VPN Services

External MFA Providers

Multi-Factor Authentication

Basic Configurations for Unified Access Management

MSCHAPv2 RADIUS Configuration

TACACS+ Management Configuration Page 

Unified Access Manager

Importing Devices from Amazon Web Services

Importing Devices from Microsoft Azure

Importing Devices from the Google Cloud Platform

Cloud PAM

CSP Account Definition

Enabling CIEM Service

Azure

Cloud Infrastructure Entitlement Management (CIEM)

Creating Script Group

Creating Script

Adding a Script Realm

Running a Script

Privileged Task Automation Logs

Privileged Task Automation

Kron PAM Logs

Active Sessions and Dual Control

System Log Viewer

SIEM Configuration

Threat Analytics and Response Dashboard

Tamper-Evident Logging

Kron PAM Reporting and Logging Functions

Reference Guide