Overview
Netskope DSPM supports scanning Oracle Exadata Database data stores both on Exascale Infrastructure or on Dedicated Infrastructure. Follow these instructions to setup Oracle Exadata Database and configure its connection to Netskope DSPM.
Create a Netskope DSPM Service Account
Begin by configuring an OCI database service account which will be dedicated to Netskope DSPM’s use.
- As an administrator, log into your Oracle Exadata Database.
- Create the Netskope DSPM-specific user by executing the following commands in order:
| Command | Outcome |
|---|---|
CREATE USER netskope_user IDENTIFIED BY "netskope_password"; | Creates the Netskope DSPM-specific user. Note: Substitute netskope_user & netskope_password with your own preferred values. |
GRANT CONNECT, RESOURCE TO netskope_user; | Permits the Netskope DSPM-specific user to connect to the OCI database. |
GRANT SELECT ANY TABLE TO netskope_user; | Grants the initial necessary Netskope DSPM-specific user permissions to power capabilities within the Netskope DSPM platform. |
GRANT select_catalog_role TO netskope_user; | Grants the remaining necessary Netskope DSPM-specific user permissions. |
Retrieve Connection Information
In addition to authenticating the data store, Netskope DSPM will require additional information to communicate with your Oracle Autonomous Database. Please follow the steps below to identify the connection values for later use within Netskope DSPM.
- Log into your OCI Console and navigate to Oracle Exadata Database instance details page and click on DB Connection button (highlighted in red).
- On the DB Connection page, copy the connection string under ‘Easy Connect’ Format (highlighted in red).
This should work for both Exadata Database on Exascale Infrastructure or on Dedicated Infrastructure.
Connect Your Data Store
Step 1: Provide Credentials
Follow these steps to configure the connection:
-
Go to Data Stores > Data Store Inventory.
-
Click CONNECT A DATA STORE in the upper right.
Tip: Alternatively, if the data store was already found by auto-discovery, go to the Discovered tab and click Connect in the Actions column.
-
In the Connect a Data Store window, click the data store icon you wish to connect.
-
In the Provide Credentials section, complete the following fields:
| Field | Value |
|---|---|
| Select OCI Account | Select one of the OCI compartments defined within the Infrastructure Section screen. The field will default if there is just one OCI compartment configured. |
| Data Store Identifier | Human-friendly name to describe this Data Store. This value displays in other Netskope DSPM screens such as Policy Management and Classification Management. |
| Data Store Endpoint | Enter the corresponding values from the Retrieve Connection Information step above. |
| Database Username (if Service Account) | Enter the corresponding value from the Create a Netskope DSPM Service Account step above. |
| Password (if Service Account) | Enter the corresponding value from the Create a Netskope DSPM Service Account step above. |
| Scan Frequency | Controls how often your Data Store is reviewed for changes; Netskope DSPM’s recommended frequency is defaulted, which you can override as needed. |
| Sidecar Pool | If you will use sidecars to monitor this data store, select a sidecar pool with network visibility to said data store. This field is displayed when there is at least one defined sidecar pool. To learn more, please visit our Sidecar Administration article. |
Step 2: Scanning Infrastructure
- Click Next.
- When the Select Capabilities tab appears, complete the following fields:
- Assign a Data Owner (Optional): Select one or more users responsible for this data store.
- Which databases should Netskope DSPM scan?: Select the specific data stores and schemas to monitor, if applicable.
- Features: Select the features you want to enable.
| Capability | Supported for Oracle Base Database |
|---|---|
| Discovery | Yes (always-on) |
| Privilege Analysis | No |
| Shadow Data Analysis | No |
| Classification | Yes |
| Data In Use Monitoring | No |
| Automation | Yes (always-on) |
Step 3: Review and Save
- Click Save.
- When the Review tab appears, the system validates your configuration. If there are any issues, follow the on-screen instructions to fix them.
- Click Save to finalize the connection.