3.1.10 Disable instance discoverability

Information

The discover_inst parameter specifies whether the instance can be discovered in the network. It is recommended that instances not be discoverable.

Discovery capabilities may be used by a malicious entity to derive the names of and target DB2 instances.

Solution

1. Attach to the DB2 instance.
db2 => attach to $DB2INSTANCE
2. Run the following command from the DB2 command window:
db2 => update database manager configuration using discover_inst disable
Default Value:
The default value for discover_inst is ENABLE.

See Also

https://workbench.cisecurity.org/files/1654