Overview
SAP offers a method to configure Sybase ASE instances utilizing TLS, enhancing security for connections to the Sybase ASE database.
Starting with release 23.0.0.0, Delphix Continuous Data Engine has introduced support for Sybase ASE instances configured with TLS. JDBC connections established by Delphix Continuous Data Engine to Sybase ASE instances can now be TLS enabled.
Starting with release 2026.2.0.0, Delphix Continuous Data Engine also supports Sybase ASE instances configured with both Kerberos authentication and TLS encryption. This allows environments using Kerberos-based authentication to benefit from TLS-encrypted connectivity simultaneously. For configuration details, refer to the Kerberos Authentication for Sybase ASE documentation.
Prerequisites
-
Kerberos authentication is configured and enabled - refer to the Delphix documentation for configuring and managing Kerberos to enable Kerberos authentication: Configure and manage Kerberos.
-
TLS on the ASE instance is enabled - Refer to the Delphix documentation for enabling TLS on a Sybase ASE instance: TLS security for Sybase ASE.
How Kerberos and TLS work together
Kerberos and TLS serve distinct and complementary security purposes:
-
Kerberos handles mutual authentication verifying the identity of both the Delphix Continuous Data Engine and the Sybase ASE instance before a connection is established.
-
TLS handles encryption ensuring that all data transmitted over the JDBC connection is encrypted in transit and protected from interception.
Using both together provides a complete security posture: verified identities and encrypted communication. Neither replaces the other.
Feature Limitations
-
TLSv1.2 is the minimum supported TLS version by Delphix as previous TLS/SSL versions have vulnerabilities.
-
The feature is certified for Sybase ASE version 15.7 to 16.0.
-
By default, Kerberos TLS is not enabled.
-
TLS is a CLI-based feature only.
-
Enable Kerberos authentication through the UI only.