Vormetric

Tomorrow morning we have a demo / presentation from Vormetric, a company that deals with Data Encryption. They specialize in encrypting data at rest and say they Informix is supported. I was invited to this one last minute so I didn't have time to research their products. I just wanted to ask if anyone currently uses Vormetric with Informix? They claim to protect data in and around the database by encrypting and controlling access to database files at the operating system level. Our university uses Jenzabar CX which runs on Informix version 11. It runs on a HP Integrity Blade and the OS is HPUX 11i version 3. In addition to the HP UNIX server, we have an IIS web server that uses services and ODBC connections to the backend Informix database. We also use a Document Imaging product from Perceptive called NolijWeb. NolijWeb runs on a Windows server using Apache/Tomcat and uses JDBC drivers to connect to Informix. Finally we use Cognos 10 from IBM for report writing which also connects to the back end database for reporting. I will be very interested to hear on the Vormetric solution especially with all the different applications and users we have accessing the Informix DB. So my question to them tomorrow will be how does the Vormetric solution work? I'm on their website now and they claim their solution does not affect performance. In theory it sounds great! Any information you might have would be helpful. Andy Pistocchi Sr. DBA / Systems Administrator The University of Tampa

Vormetric is the underlying technology of the IBM Data Encryption Expert (DEE) product which we sell to DB2 and Informix customers. They (Vormetric) got their start encrypting flat files. When first released, DEE only supported Informix instances using flat files for chunks. They have since improved their software to support raw devices. Basically, you encrypt an entire dbspace (or more). What ever tables (or table fragments) or indexes you want encrypted, you put in an encrypted dbspace(s). the encryption keys are held in a separate server which handles key rotation and provides you (the admin) with access controls. When an SQL call needs to access data in an encrypted dbspace, the key server is queried for access privileges for the user ID. It may also ask for the key if it isn't already cached on the Informix side. If approved, access is granted and unencrypted data is returned. Is there an impact on throughput? Yes. Is it horrific? no. It's the price you pay for the security. BTW, since the Informix backup API calls simply read disk pages (i'm generalizing here) , instance backups of encrypted dbspaces are encrypted. Carlton ------------------------------------------------- Carlton Doe Flower Mound, TX No trees were killed in the transmission of this email, however a large number of electrons were temporarily inconvenienced. On Feb 26, 2014, at 4:55 PM, "ANDREW PISTOCCHI" <APISTOCCHI@UT.EDU> wrote: > Tomorrow morning we have a demo / presentation from Vormetric, a company that > deals with Data Encryption. They specialize in encrypting data at rest and say > they Informix is supported. I was invited to this one last minute so I didn't > have time to research their products. I just wanted to ask if anyone currently > uses Vormetric with Informix? They claim to protect data in and around the > database by encrypting and controlling access to database files at the > operating system level. > > Our university uses Jenzabar CX which runs on Informix version 11. It runs on > a HP Integrity Blade and the OS is HPUX 11i version 3. In addition to the HP > UNIX server, we have an IIS web server that uses services and ODBC connections > to the backend Informix database. We also use a Document Imaging product from > Perceptive called NolijWeb. NolijWeb runs on a Windows server using > Apache/Tomcat and uses JDBC drivers to connect to Informix. Finally we use > Cognos 10 from IBM for report writing which also connects to the back end > database for reporting. I will be very interested to hear on the Vormetric > solution especially with all the different applications and users we have > accessing the Informix DB. > > So my question to them tomorrow will be how does the Vormetric solution work? > I'm on their website now and they claim their solution does not affect > performance. In theory it sounds great! > > Any information you might have would be helpful. > > Andy Pistocchi > Sr. DBA / Systems Administrator > The University of Tampa > > > ******************************************************************************* > Forum Note: Use "Reply" to post a response in the discussion forum. >

I would say do your own testing before you buy. We did and found the performance impact to be too great for our use. I used the performance testing app from ATG for my testing. Dan -----Original Message----- From: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] On Behalf Of ANDREW PISTOCCHI Sent: Wednesday, February 26, 2014 7:56 PM To: ids@iiug.org Subject: Vormetric [32600] Tomorrow morning we have a demo / presentation from Vormetric, a company that deals with Data Encryption. They specialize in encrypting data at rest and say they Informix is supported. I was invited to this one last minute so I didn't have time to research their products. I just wanted to ask if anyone currently uses Vormetric with Informix? They claim to protect data in and around the database by encrypting and controlling access to database files at the operating system level. Our university uses Jenzabar CX which runs on Informix version 11. It runs on a HP Integrity Blade and the OS is HPUX 11i version 3. In addition to the HP UNIX server, we have an IIS web server that uses services and ODBC connections to the backend Informix database. We also use a Document Imaging product from Perceptive called NolijWeb. NolijWeb runs on a Windows server using Apache/Tomcat and uses JDBC drivers to connect to Informix. Finally we use Cognos 10 from IBM for report writing which also connects to the back end database for reporting. I will be very interested to hear on the Vormetric solution especially with all the different applications and users we have accessing the Informix DB. So my question to them tomorrow will be how does the Vormetric solution work? I'm on their website now and they claim their solution does not affect performance. In theory it sounds great! Any information you might have would be helpful. Andy Pistocchi Sr. DBA / Systems Administrator The University of Tampa ******************************************************************************* Forum Note: Use "Reply" to post a response in the discussion forum.

Look at the most recent version performance difference is dramatic 4.4.1 saw nearly a 50 percent hit in tests. 5.1.3 has almost zero performance impact ( anywhere from 1 to 3 percent depe= nding on load) Sent from my iPhone > On Feb 26, 2014, at 7:27 PM, "Mueller, Daniel D." <ddmueller@intercall.com= > wrote: >=20 > I would say do your own testing before you buy. We did and found the=20 > performance impact to be too great for our use. I used the performance tes= ting=20 > app from ATG for my testing.=20 >=20 > Dan=20 >=20 > -----Original Message-----=20 > From: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] On Behalf Of ANDR= EW=20 > PISTOCCHI=20 > Sent: Wednesday, February 26, 2014 7:56 PM=20 > To: ids@iiug.org=20 > Subject: Vormetric [32600]=20 >=20 > Tomorrow morning we have a demo / presentation from Vormetric, a company t= hat=20 > deals with Data Encryption. They specialize in encrypting data at rest and= say=20 > they Informix is supported. I was invited to this one last minute so I did= n't=20 > have time to research their products. I just wanted to ask if anyone curre= ntly=20 > uses Vormetric with Informix? They claim to protect data in and around the= =20 > database by encrypting and controlling access to database files at the=20 > operating system level.=20 >=20 > Our university uses Jenzabar CX which runs on Informix version 11. It runs= on=20 > a HP Integrity Blade and the OS is HPUX 11i version 3. In addition to the H= P=20 > UNIX server, we have an IIS web server that uses services and ODBC connect= ions=20 > to the backend Informix database. We also use a Document Imaging product f= rom=20 > Perceptive called NolijWeb. NolijWeb runs on a Windows server using=20 > Apache/Tomcat and uses JDBC drivers to connect to Informix. Finally we use= =20 > Cognos 10 from IBM for report writing which also connects to the back end=20= > database for reporting. I will be very interested to hear on the Vormetric= =20 > solution especially with all the different applications and users we have=20= > accessing the Informix DB.=20 >=20 > So my question to them tomorrow will be how does the Vormetric solution wo= rk?=20 > I'm on their website now and they claim their solution does not affect=20 > performance. In theory it sounds great!=20 >=20 > Any information you might have would be helpful.=20 >=20 > Andy Pistocchi=20 > Sr. DBA / Systems Administrator=20 > The University of Tampa=20 >=20 >=20 > **************************************************************************= *****=20 > Forum Note: Use "Reply" to post a response in the discussion forum.=20 >=20 >=20 > **************************************************************************= *****=20 > Forum Note: Use "Reply" to post a response in the discussion forum.=20 >=20