-
Mythily Sathiyamoorthy
- PowerBuilder
- Friday, 19 June 2026 11:23 AM UTC
During a security assessment, network traffic captured using Wireshark showed that certain application communications between the PowerBuilder client and backend systems are visible in readable format. Specifically, SQL queries were observed within the captured traffic.
While some portions of the communication appear to be encrypted, the visibility of SQL statements raises concerns regarding whether transport-level encryption is fully enabled and correctly configured.
Could you please advise on the following:
What is the recommended approach for securing communication between PowerBuilder applications and backend databases/services?
Are there any PowerBuilder-specific configurations, DBParms, or runtime settings required to enforce TLS/SSL encryption?
How can we verify whether database connections established by a PowerBuilder application are using encrypted communication?
Are there any known scenarios where SQL statements may remain visible despite encryption being enabled?
Are there any Appeon best practices, patches, or configuration recommendations for ensuring end-to-end encrypted communication in PowerBuilder applications?
We are looking for guidance on how to prevent application data, SQL statements, and other sensitive information from being exposed during network transmission and to ensure that communication channels are secured in accordance with current security best practices.
Any recommendations or relevant documentation would be greatly appreciated.
Thanks,
Mythily
Find Questions by Tag
Helpful?
If a reply or comment is helpful for you, please don’t hesitate to click the Helpful button. This action is further confirmation of their invaluable contribution to the Appeon Community.