Direct access from database client to the database server should be blocked.
The database server should only accept the data transfer through the Privileged Account Manager server.
If the database is connected over SSL to the Oracle database, import Privileged Account Manager certificate to the database client’s wallet.
If the database is connected over SSL to the Microsoft SQL server, import Privileged Account Manager certificate to the database client.
If the database is connected over SSL to Microsoft SQL server, ensure that the Microsoft SQL server supports TLS 1.2.