The Single Connect SQL Proxy feature can be used to log SQL sessions and restrict users’ privileges, such as blocking queries and masking data during sessions. This proxy feature is made available by applying the configurations in the following chapters.

Learn how to leverage the powerful Single Connect SQL Proxy feature, which enables logging of SQL sessions and provides control over user privileges. Discover how this feature allows you to efficiently block queries and mask sensitive data during sessions

Adding SQL Users

Creating User Groups

Adding Device Groups

Adding Device Realms

Adding a Database as a Device

Creating a SQL Policy

Creating a Policy Group

Creating a Policy Realm1

User/Device/Policy Definition

Creating Datasources

Creating a Masking Method

Creating a Masking Policy

Creating a Policy Realm

Dynamic Data Masking

Connecting with the Single Connect SQL Proxy

SQL Proxy Configuration for SSO

User Settings to use SSO

Device Group Configuration

Connecting to SQL Proxy via SSO

Single Sign-On Settings for Oracle 12 c release 1 DB and MSSQL DBs

Logging SQL Queries

SQL Proxy

Creating Data Types 

Bulk Data Type Import

Data Discovery

Schedule Discovery

Sensitive Data Discovery

SFTP Connections in SSH Devices

Global Username Connections

Global SSH Key Connection

LDAP/AD User Connection

Managerial Approval for SFTP Devices Connections

SFTP Proxy Connections

SFTP Proxy Assigned Credential & User Session Usage

SFTP Proxy Connection Interfaces

SFTP Proxy Timeout Settings

SFTP Proxy Encryption and Key Exchange Algorithms

Encryption of Stored Files in SFTP Proxy 

SFTP Proxy

Data Access Manager

Single Connect Reference Guide

3.3.0 Single Connect Web GUI

License Manager

Email Server Configuration

Mail Management

Language Settings

Menu Lists Management

System Configuration Parameters

Enabling Push Notifications for Mobile Application

Backup Manager

Enabling HTTPS on the Single Connect Web GUI

802.1x Authentication

SAML Authentication

Hardware Security Module (HSM) Integration

Windows Authentication on the Single Connect GUI

Multitenancy

Single Connect Administration

Manual User Creation

Single Connect Users Search

User Definition Option Menu

Editing Single Connect Users

User Properties Set up 

Temporary User

Local User Bulk Import

New User Request

Force New User to Change Password 

User Password Strength Settings 

User Password Hash Algorithm Settings

Notifying Inactive Users Before Lock

LDAP/Active Directory Integration

User Group Creation

Assigned Credentials

SSH Keys Manager

User Management

Element Type

Device Groups

Device Inventory

Device Management

Policy Key Definition

Policy Groups Definition

Policy Realm Definition

Policy Tracking

Policy Management

Managerial Approval for Connections 

Managerial Approval Reservation

Managerial Approval for Commands

Managerial Approval in Shared Account Password Manager (SAPM)

Approval Workflow

Approval Workflow SMS Settings

Approval Management

SSH Proxy

RDP Proxy

HTTP Proxy

Advanced Authorization Methods

Threat Analytics

Session Manager

Shared Accounts Password Management (SAPM)

Managing Application-to-Application Password Management (AAPM) Accounts

Password Vault

Sending MFA QR Code to Users

Creating a Connection Between Single Connect and the Single Connect Mobile Application

Enabling Multi Factor Authentication (MFA)

Using MFA to Log in to the Single Connect Web GUI

Using MFA to Log in to the Single Connect Desktop Client

Using MFA for SSH Connections

Using MFA for RDP Connections

Using MFA for SSH Proxy

Using MFA for HTTP/HTTPS Proxy

Using MFA for SFTP Proxy

Using MFA for TACACS+ Manager

Using MFA for Radius

Using MFA for Mobile Application

Offline/Online Mode Settings

Using SMS for MFA

Using Hardware Tokens for MFA

Using Authentication Key (FIDO Key) for MFA

Using Keystroke to User Behavior Analytics

MFA Configurations for VPN Services

External MFA Providers

Multi-Factor Authentication

Basic Configurations for TACACS+ Devices

MSCHAPv2 RADIUS Configuration

TACACS+ Management Configuration Page 

TACACS+ Access Manager

Importing Devices from Amazon Web Services

Importing Devices from Microsoft Azure

Importing Devices from Google Cloud Platform

Cloud PAM

Single Connect Logs

Active Sessions and Dual Control

System Log Viewer

Viewing Logs in Different Time Formats

Log Backup Management and Archiving

SIEM Configuration

Reports

Dashboard

Tamper Proof Logging

Single Connect Reporting and Logging Functions

Adding New Command Templates

Executing a Command Template

Adding a New Script

Running a Script

Creating a Workflow

Running a Workflow

Workflow History Logs

Privileged Task Automation Manager

Monitoring

Alarms

Alarm Configuration

Monitoring & Alarms

Watchdog Configuration 

Watchdog Mechanism

High Availability

Failover Scenario

Visualizing Reports and User Rights

Creating Charts for Reporting

Creating Dashboards

Report Email Scheduling

Dynamic Reports

Reporting

Logical Architecture

Tenant Management Requirements 

Tenant Management Interface

Administration by Tenant Admins

System Config Manager Parameters

DevOps Integration

APPENDIX 1: System Config Manager Parameters

APPENDIX 2: Job Descriptions for Job Scheduler

Reference Guide 