Guides

This section contains detailed guides on how you can mask your data, set up your database auditing and make your data and database secure.

Use the guides to maximize the effectiveness of DataSunrise products

How to…

Static & Dynamic Data Masking

Security Rules & Guides

Installation

How to Migrate DataSunrise CloudFormation Template from Launch Configuration (LC) to Launch Template (LT) Resource in Auto Scaling Group

Migrating from an AWS Launch Configuration (LC based Auto Scaling Group (ASG) to a Launch Template (LT) resource offers significant advantages for managing DataSunrise deployments, such as increased flexibility and support for modern AWS and OS features. In many cases, the migration can be performed…

Learn More

How to Send DataSunrise Events to a Microsoft Teams Channel via Incoming Webhook using Subscribers

In today’s fast-paced digital environment, keeping track of database events and security alerts is crucial for maintaining the integrity and security of your data. DataSunrise, a leading database security solution, offers robust mechanisms to monitor and alert various database activities. One effective way to stay…

Learn More

How To Offload The Audit Database Data To AWS S3 And Read It Using AWS Athena Service

Audit Archiving is an optional feature of the Audit Database Cleanup Task in DataSunrise Database Security. This feature allows a DataSunrise installation administrator to remove older audited data and store it in AWS S3 service to provide a better, more cost-efficient way of storing expired…

Learn More

Convert Trial or BYOL Configuration of DataSunrise to Hourly Billing

In the rapidly evolving landscape of data security, efficient and cost-effective solutions are crucial. DataSunrise provides robust database security and auditing, available under different licensing models, including Trial, Bring Your Own License (BYOL), and Hourly Billing. Transitioning from a Trial or BYOL configuration to an…

Learn More

PostgreSQL (RDS) vs Aurora PostgreSQL

Which database choosing for DataSunrise’s backend databases Postgres RDS or Aurora PostgreSQL When it comes to choosing between Postgres RDS and Aurora PostgreSQL for DataSunrise, it’s important to understand that both can be used effectively. However, each has its own unique benefits and considerations. Postgres…

Learn More

How to Troubleshoot “Connection Was Terminated” or “Connection Terminated Unexpectedly” Errors in Applications Using DataSunrise Proxies

In a world increasingly dependent on seamless digital communication and data exchange, encountering errors like “Connection was terminated” or “Connection terminated unexpectedly” can disrupt critical business operations. These errors can be particularly challenging in environments that use DataSunrise proxies, which act as security and compliance…

Learn More

DataSunrise’s Performance Under High Traffic Conditions

DataSunrise is frequently queried about its performance when handling traffic volumes that exceed typical limits. Clients are particularly concerned about whether DataSunrise will drop traffic, experience delays, or manage the situation differently. This post delves into how DataSunrise copes with such scenarios. Operational Capacity and…

Learn More

DataSunrise’s Approach to Configuring Penalties for SQL Injection Detection

SQL injection is a prevalent threat to database security, where attackers manipulate SQL queries to gain unauthorized access to data. DataSunrise, a database security solution, offers a robust mechanism to detect and prevent SQL injection attacks through a system of penalty points. This article will…

Learn More

How to Block Specific Hosts in DataSunrise for Enhanced Database Security

In the digital age, where data breaches and cyber-attacks are becoming increasingly common, protecting your database from unauthorized access is more important than ever. DataSunrise Database Security is a powerful tool that helps you safeguard your data by setting up various security measures, including the…

Learn More

Troubleshooting AWS Metering and Hourly Billing Issues in DataSunrise on AWS Marketplace

When deploying DataSunrise on AWS, it is crucial to ensure that all components are correctly configured to avoid errors and warnings that can affect the performance and security of your database environment. This article will guide you through the process of troubleshooting common issues related…

Learn More

How To Perform Cloud Formation Modification

DataSunrise provides a dedicated script for HA infrastructure deployment within Amazon Web Services based on Amazon Cloud Formation Service. The following template creates all the necessary resources to support the DataSunrise HA environment (the EC2 servers under the AutoScaling group, Configurational Audit and Dictionary RDS…

Learn More

Dynamic Data Masking with DataSunrise: Masking with Lua scripts

DataSunrise is a robust security solution that offers dynamic data masking capabilities for a wide range of databases. This feature allows sensitive data to be obfuscated in real time, ensuring that it remains protected even when accessed by authorized users. In this article, we will…

Learn More

How to Choose the Database for Audit Storage: A Performance Analysis

In the intricate realm of database management, the importance of selecting the right database type cannot be overstated, particularly when it comes to high-load scenarios. At DataSunrise, we understand the significance of this decision, especially when it comes to high-loaded environments. Here, we present a…

Learn More

How to Run pgbench Through DataSunrise Proxy on PostgreSQL 14 with SCRAM Authentication

Introduction Welcome to our latest blog post where we dive into the specifics of running pgbench through a DataSunrise proxy for PostgreSQL databases, particularly for version 14 and later. These versions of PostgreSQL come with an activated feature known as SCRAM authentication, enhancing security through…

Learn More

DataSunrise SSO Authentication Based on SAML (Okta)

In DataSunrise we always strive to make our users’ experience easier. Logging in to numerous services and websites can take a lot of time. Plus there is also a variety of different difficult passwords that you should remember or restore every time you forget it….

Learn More

DataSunrise SSO Authentication Based on OpenID (Okta)

Previously, we described how to make Single sign-on authentication (SSO) based on SAML with the help of Okta. SSO is a useful tool when you need to authenticate in different applications or websites with one set of credentials. That is why we also implemented SSO…

Learn More

Comprehensive Guide On How to Search for Sensitive Data in Images Hosted on AWS S3

To provide our clients with a powerful data discovery tool, some time ago we presented the OCR (Optical Character Recognition) functionality integrated into our Data Discovery module. This feature enables you to search for sensitive data such as personal data, credit card numbers, driver licenses,…

Learn More

How to Deploy DataSunrise with Terraform Template on Azure

Previously we described how to configure DataSunrise on Microsoft Azure using Azure Resource Manager. As far as High Availability configuration requires accurate setting implementation with all the dependencies applied correctly, there is no doubt that templates are useful. Without them the product installation might take…

Learn More

Integrate DataSunrise with SQL Server Always On Cluster

DataSunrise application can protect not only single node database servers but also cluster type database servers. Let us take a deep look into integration of DataSunrise application with SQL Server Always On Cluster. An availability group supports a replicated environment for a discrete set of…

Learn More

How to Deploy DataSunrise in Microsoft Azure Using Azure Resource Manager

Nowadays Cloud Computing technology is the most efficient and convenient way to run the production environment in. Many companies are willing to store their data and deploy applications to the cloud to be able to build, run, and manage their services across multiple clouds using…

Azure

Cloud Computing

Learn More

How to Perform DataSunrise Static Data Masking for MongoDB

DataSunrise now has the capability of Static Data Masking for MongoDB. Earlier, only Dynamic Masking was supported. Now you can use all DataSunrise functionality with a variety of masking methods including Format-Preserving Encryption (FPE), Format-Preserving Tokenization (FPT), and Lua script to implement custom masking algorithms….

MongoDB

Learn More

How to Configure DB Audit Trailing for MS Azure MySQL

Along with other functionalities, DataSunrise features a dedicated auditing tool, the DB Audit Trailing, based on usage of database native auditing tools and mechanisms. In this article we explain how to configure DataSunrise and your MS Azure MySQL database to do DB Audit Trailing. Note…

Azure

Learn More

Configure DB Audit Trailing for MS Azure PostgreSQL

Along with other functionalities, DataSunrise features a dedicated auditing tool, the DB Audit Trailing, based on usage of database native auditing tools and mechanisms. In this article we explain how to configure DataSunrise and your PostgreSQL database hosted on MS Azure to do DB Audit…

Azure

PostgreSQL

Learn More

How to Configure DataSunrise to Mask Data for Amazon Athena

We expand our opportunities by introducing Dynamic Masking for Amazon Athena. Now you can obfuscate sensitive data from Athena on-the-fly to protect it from unauthorized persons. Client applications use an encrypted connection to connect to Athena. DataSunrise can mask data in Athena only in Proxy…

Learn More

How to Upgrade RHEL OS version of existing DataSunrise servers

DataSunrise is compatible with various operating systems and Red Hat Enterprise Linux (RHEL) is one of them. No wonder sooner or later you can face the need to upgrade your OS. We wrote this guide to help you evade any possible issues of upgrading an…

Learn More

How to Integrate DataSunrise with AWS Database Activity Streams for Getting Auditing Results for AWS Aurora PostgreSQL

Overview of database activity auditing methods Today, database auditing becomes more and more important because of numerous legal acts and regulations dedicated to sensitive data protection such as GDPR, KVKK, etc. Technically, there are multiple database auditing methods exist, the most popular are: Database traffic…

Learn More

Set Up SSL Certificates for DataSunrise Database Proxy

The majority of databases support verification of server identity by using certificates. Thus a verifying procedure is performed during a connection to a server: if the certificate received from the server is authentic, a connection will be established; otherwise it will be considered as a…

Database Proxy

SSL Certificates

Learn More

Reports in DataSunrise: Crucial System for Enhanced Database Security

DataSunrise provides multi-layered protection for your databases and therefore processes a vast amount of operational and security data. Audit rules, security policies, and multiple types of Masking rules work together continuously — and with so many components, it can be challenging to maintain full visibility…

Reports

Learn More

How to Hide Schemas From Users in Redshift

Today, the activity of any organization is associated with the operation of a large amount of information, access to which has a wide range of people. Consequently, the complexity of ensuring the confidentiality of sensitive data increases, along with the growth of the volume of…

Redshift

Learn More

AWS RDS PostgreSQL Audit Logs in DataSunrise

Today it is almost unsurprising to see another headline related to data breaches or data privacy. This affects you personally as a customer of those companies – you want someone to take good care of your data. It also affects you professionally; as a person…

Amazon RDS

PostgreSQL

Learn More

Audit Administrative Actions in Your Oracle RDS and EC2

Preface Amazon Relational Database Service (Amazon RDS) is a web service that makes it easier to set up, operate, and scale a relational database in the AWS Cloud. It provides cost-efficient, resizable capacity for an industry-standard relational database and manages common database administration tasks. DataSunrise…

Amazon RDS

EC2

Oracle

Learn More

How to Check if DataSunrise Receives Traffic

Basically, the first thing to be done is to check the Dashboard to determine if a connection is established with DataSunrise Security Suite proxy. The established connections count is shown in the Dashboard section: For example, in this screenshot you can see that there are…

Linux Checking Process

Windows Checking Process

Learn More

Remove a Procedure or a Function From a Database

When developing tools that interact with various DBMS platforms, subtle differences in syntax and feature support can pose a challenge. One such case is how to drop stored procedure definitions, as SQL support and conventions vary between systems. This article explores the drop stored procedure…

Remove a Function

Remove a Procedure

Learn More

How To Control the Visibility of Table Names

Managing access to a substantial volume of data within an organization poses considerable challenges. Particularly when numerous individuals are involved, ensuring controlled access becomes a complex endeavor. Given these circumstances, the need for data protection becomes paramount. Unauthorized access and manipulation can lead to significant…

Dynamic Masking

Learn More

Masking Unstructured Text on AWS S3

Data in Clouds We are living in a world where data is one of the most valuable assets. And the IT industry is constantly developing ways of storing this data in the most convenient way. Storing data in clouds is one of the most popular…

Amazon S3

Data in Clouds

Learn More

In-place Data Masking

One of the ways to protect sensitive data inside databases is data masking. In this article we are going to learn more about in-place data masking and steps to mask your data in place using DataSunrise Database Security. Static Masking and In-place Masking In-place Masking…

In-place Masking

Static Masking

Learn More

Basic Principles of Dynamic Masking

Introduction This document describes how DataSunrise implements Dynamic Data Masking Principles for sensitive data on-the-fly and how masking is performed for SQL and NoSQL database types. Data Masking Principles Let’s start from the beginning and get familiar with two basic principles of data masking in…

Dynamic Masking

SQL

Learn More

Dynamic Data Masking Guide

The main goal of Dynamic Data Masking from DataSunrise is to prevent accidental and deliberate data exposure. This goal is achieved by converting original real data into fake one. This database protection tool is very convenient when a company needs to provide access to its…

Dynamic Masking

Learn More

Static Data Masking Guide

Static Data Masking tool is a constituent part of the DataSunrise Database Security Suite. It is a special database protection mechanism aimed at protecting sensitive data from any kind of inside and outside threats. All customer sensitive data is obfuscated thus making it useless for…

Static Masking

Learn More

DataSunrise Centralized Console Overview

DataSunrise is pleased to announce DataSunrise Centralized Console which is aimed at easy management for multiple DataSunrise installations in your environment. This standalone application will help you to aggregate your DataSunrise management endpoint in one application in order to ease the pains of managing large…

DSCC

Learn More

DataSunrise Rules Best Practices

Introduction DataSunrise Database Security is a powerful Database Activity Monitoring/Data Auditing and real-time Data Protection and Database Firewall solution that significantly increases data and database security level both on-premise and in the cloud. Often, it is difficult to understand what data should be protected, where…

Best Practices

Learn More

Lua script discovers sensitive data in JSON files

When working with the Data Discovery feature, DataSunrise enables you to use a variety of prebuilt search filters for various types of sensitive data. But is there a way of searching for unique data? Yes, to accomplish this task you can use Lua. The use…

Data Discovery

JSON file

Lua script

Learn More

Security Guide

The Data Security component protects target databases against unauthorized queries and SQL injection attacks. Data protection functionality is available in the Proxy mode only. Deployed as an intermediary between users and databases, DataSunrise intercepts all incoming and outcoming queries. With the help of advanced SQL…

Security Rule

Learn More

Security Rules Against SQL Injections

SQL injection is a web security vulnerability that allows a cybercriminal to get access to a database through a web application linked to this database. The attacker interferes with the queries from this web application directed at the database. As a result, the attacker can…

Security

SQL Injections

Learn More

Audit Guide

Data auditing provides real-time database activity monitoring and records details about every query sent to the database, including data modifications, retrieval, and deletions. DataSunrise continuously tracks user activity, as well as changes to database configuration and system parameters. In this guide, we explain how to…

Audit Rule

Learn More

Learning Rules and Audit

Database protection from DataSunrise is effected through sets of learning rules and audit, security and masking rules. This approach makes protection very versatile and highly customizable. However, DataSunrise is constantly thinking how to make database protection even more user-friendly and efficient. DataSunrise can analyze all…

Audit

Rules

Learn More

Rules Priority

DataSunrise provides an intelligent way of managing Rules triggering sequence to efficiently capture targeted information within your database. Whilst maintaining this level of focus, DataSunrise eliminates redundant execution and/or generation of audit records by the same Rule module twice, so that should be kept in…

Audit Rules

Security Rules

Learn More

Installing DataSunrise from the Repository (Debian 13)

For your convenience, we have created a DataSunrise DEB repository and added a possibility to install DataSunrise from it. To do it, run the Terminal and execute the following commands: Install the necessary packages: sudo apt-get update sudo apt-get -y install dirmngr ca-certificates gpg Import…

Learn More

Installing DataSunrise from the Repository (Ubuntu 24)

For your convenience, we have created a DataSunrise DEB repository and added a possibility to install DataSunrise from it. To do it, run the Terminal and execute the following commands: Install the dirmgr package for accessing the OpenPGP keyservers and the ca-certificates package to resolve…

Learn More

Install DataSunrise package from the DEB repository (for Debian 12/Ubuntu 22)

For your convenience, we have created a DataSunrise DEB Repository and added a possibility to install DataSunrise from it. To do it, run the Terminal and execute the following commands: 1. Install the dirmgr package for accessing the OpenPGP keyservers and the ca-certificates package to…

DEB repository

Learn More

Install DataSunrise from the RPM repository (for RHEL, CentOS 8/9)

For your convenience, we created a DataSunrise RPM Repository and added a possibility to install DataSunrise from RPM. To do it, run the Linux Terminal and execute the following commands: For RHEL 8, CentOS 8 Run the Linux Terminal and execute the following commands: Import…

CentOS

RHEL

Learn More