FORTINET® DATABASE SECURITY SOFTWARE

Fortinet Database Security Software extends the FortiDB™ database security solution to very large enterprises, offering centralized management of vulnerability assessment and reporting for hundreds of databases, licensed per database instance. Heterogeneous platform support includes AIX, Red Hat Enterprise Linux, Solaris 10, Windows XP/Vista, and Windows Server 2003.

• Scalable protection for thousands of databases extends built-in database security features for comprehensive protection against internal and external threats.
• Automated near real-time detection and alerts reduce security and operational vulnerabilities.
• Native audit guarantees a 100% capture rate.
• Web-based centralized management of multiple distributed, heterogeneous databases enables consistent policy enforcement.
• Auto-Discovery assures complete coverage by finding all databases on the network and across subnet boundaries, even on irregular ports.
• Quick time-to-value with hundreds of pre-populated policies covering known exploits, configuration weaknesses, OS issues, operational risks, and data access privileges, with automatic updates to latest regulatory/industry best practices.
• Reports with expert-level remediation advice offer out-of-the-box support of compliance programs with best practices for major regulations: PCI, SOX, HIPAA, and GLBA.
• Policies are easily run to verify that databases conform to corporate standard configurations, implement tests for custom applications, or conduct Extended Penetration Testing to test for common passwords, etc.
• FortiDB Security Service delivers dynamic updates to vulnerability management policies through intelligence gathered by Fortinet's dedicated global threat research team.
• Policy Versioning to keep track of pre-defined policies and generate reports with the policy information that existed when the original scan was run.
• Database auditing records database activity for complete and accurate audit trails; independent audit storage provides an additional security layer for audit integrity - including self-auditing of FortiDB itself.
• Standardized, exportable audit reports customizable with company branding are designed out-of-the-box to support compliance programs, with graphic trend analysis to spot and isolate patterns.
• Database Activity Monitoring captures all types of database activity from administration events to user activity, regardless of originating command type (plain SQL or stored procedures) or connection type (ex - standard, pooled, or console).
• Non-intrusive, agentless operation enables easy deployment, places no load on database operations, and avoids putting any applications at risk.

• Supports thousands of databases, licensed per instance
• System requirements: 2.0 Ghz CPU, 1024 MB RAM, 200 MB HDD
• Operating system support: AIX 5.3 (64-bit); Red Hat Enterprise Linux 4.0 or 5.0 (64-bit); Solaris 10 (64-bit); Windows XP/Vista; Windows Server 2003, SP1 (32-bit or 64-bit)
• Database support: DB2 UDB V8 (except UBM object policy), DB2 UDB V9 (VA only); MS SQL Server 2000, MS SQL Server 2005, MS SQL Server 2008; MySQL 5.1 (VA only); Oracle 9.2.x, Oracle 10gR1, Oracle 10gR2, Oracle 11.1.0.x; Sybase ASE 12.0 (DAM only), Sybase ASE 12.5, Sybase ASE 15.0.2 (VA only)
• Repository Database support: Apache Derby 10.x, DB2 UDB v9, Microsoft SQL Server 2005, Oracle 10gR2, PostgreSQL 8.3
• Browser support: Internet Explorer 7.x, Firefox 2.x (VA only), Firefox 3.x (VA only)