Configuring MySQL connector

Prerequisites

  • The database must be reachable from the network where the product is deployed (for example, via a private DNS name or a routable IP address).
  • If a firewall is in place, ensure the database port is open.
  • Create a user account with read access to database metadata (schemas, tables, and views) with access to system tables data (required for users, permissions, and metrics extraction) for the product to run the scanning process. The classification process requires access to run "SELECT * queries" for all user tables and columns.

Creating MySQL Database Credentials

  1. Navigate to Administration > Data Sources and from the left hand menu select MySQL.

  2. Click Add Credentials to create new MySQL connection credentials.

  3. Gather the required connection details. For example:
    • Credentials name — any unique name, e.g., `PROD HR DB Credentials`
    • Hostname — e.g., `mysql01.company.com`
    • Port — e.g., `3306` (default MySQL port)
    • Database name — e.g., `hrdb`
    • Username — e.g., `hrdb`
    • Password — e.g., `hrdb_password`

  4. (Optional) The connection uses the MySQL JDBC driver. If your environment requires additional JDBC properties, add them under Optional Settings. For example, to enforce SSL/TLS you can include:
    • useSSL=true
    • verifyServerCertificate=true
  5. Click Save & Create Scan to save the credentials and proceed to the scan configuration. The system will attempt to connect and will display an error if the connection fails: