SecureSphere Database Activity Monitoring
Market Leading Visibility into Database Usage
SecureSphere Database Activity Monitoring Overview
The SecureSphere Database Activity Monitoring delivers automated and scalable activity monitoring,
auditing, and reporting for Oracle, MS-SQL, MySQL, IBM DB2 (including z/OS), Sybase, Informix
and Teradata environments. SecureSphere tracks privileged user access, SQL transactions
for forensics, prevents database leaks, and ensures audit integrity by establishing an independent
audit trail of user activity. SecureSphere is deployed as a non-inline monitor (sniffer)
on the network, while light-weight agents inspect local DBA traffic. Unlike native database
logging, SecureSphere can track SQL queries and responses without degrading database performance.
As the most widely-used database monitoring solution, the SecureSphere Database Activity
Monitoring has become the solution of choice for many of the world’s leading organisations.
Offering server and sensitive data discovery, vulnerability assessment, activity monitoring,
auditing and reporting, SecureSphere provides unmatched security, visibility, and compliance
controls.
SecureSphere Database Activity Monitoring Benefits
- Offers complete visibility and an independent audit trail of database activity
- Streamlines data collection, analysis, and compliance report creation
- Jumpstarts compliance initiatives by discovering and classifying sensitive data
and assessing databases for vulnerabilities
- Documents security and compliance with powerful reporting engine
- Provides broadest options for network, agent, and agent-less based database monitoring
- Supports large, distributed environments with a high-performance architecture and
centralised management
SecureSphere Database Activity Monitoring Features
- Detailed and Granular Auditing for Heterogeneous Environments
SecureSphere’s comprehensive audit trail tracks the "who, what, when, where and how"
details for all database transactions on all platforms, including LUW and z/OS
- Automated Data Discovery, Classification and Vulnerability Assessment
SecureSphere discovers database servers and locates and classifies sensitive data; database
assessments analyse databases for hundreds of vulnerabilities and configuration flaws.
- Material Variances of Profiled User Activity
Imperva’s unique Dynamic Profiling technology establishes a baseline of user activity
and continuously updates the baseline profile over time; SecureSphere identifies material
variances when users perform unexpected queries or violate access policies.
- Data Leak Prevention
SecureSphere inspects outbound traffic to identify and optionally audit leaks of sensitive
data such as cardholder data and social security numbers.
- Separation of Duties Enforcement
SecureSphere’s audit mechanism is completely independent of the database being audited
and it does not require DBA involvement for setup or maintenance. The audit log is stored
separately in a tamper-proof repository and may be optionally encrypted or digitally
signed.
- Low impact, High Performance, Zero Latency
By monitoring almost all SQL traffic at the network level and restricting Imperva’s
light-weight agent to local DBA activity, SecureSphere offers unparalleled performance
with no impact on existing applications or infrastructure.
- Enterprise-grade Centralised Management
Scaling to protect large, distributed data centres, the
MX Management Server centralises
the configuration, monitoring and reporting of multiple appliances.
- Risk Management
Includes a powerful Risk Explorer to quickly identify and prioritise critical sensitive
data and physical databases to audit.
- Powerful Reporting Framework
SecureSphere includes a flexible, graphical reporting engine that includes both pre-defined
and fully-customizable reports. SecureSphere can also integrate with third party products
such as SIEM and ticketing solutions.
- Automated Compliance Workflow
Compliance reports may be scheduled and distributed across the organisation; SecureSphere
can record when key stakeholders review reports or define followed tasks.
Request Your Evaluation of SecureSphere Database Activity
Monitoring
|
|
