Configure gateway groups and servers
Prepare a data source, deployment address, service port, access policies, and masking rules.
Create a group
Open Data Security > Security Gateway > Gateway Group Management and add name/code. Check associated gateways before editing/deleting. The code must match deployed JDBC gateway configuration. Creating a group does not deploy/start a service; confirm operations has started the matching service.
Create a gateway
- Select New Security Gateway.
- Enter name, source, and group.
- Set the gateway service port, not the database's original port.
- Choose login mode and credentials.
- Enable and save.
- Verify configuration/state, then test a client.
Use Service Gateway Connection Information in details. Verify each advertised address and enforcement. Details need not repeat edit-form port/type fields separately. Authorized administrators can download datablau-jdbc.jar; retest after replacement.
Choose an identity mode
| Mode | Credentials | Policy identity |
|---|---|---|
| DAM user | DAM username/password | That user's policies |
| Custom user / JDBC virtual account | Gateway-configured username/password | Matching DAM username's policies; password is the gateway password |
Virtual accounts commonly serve applications; DAM users commonly use database tools. Do not interchange passwords.
Change or disable
Edit source, port, or login mode and retest. Enabled gateways cannot be deleted; assess impacts and disable first.
Next: JDBC clients.