McAfee Integrity Monitoring for Databases

McAfee Integrity Monitoring for Databases

Cost-effective database solution for evaluating and monitoring system security

Next Steps:

Overview

McAfee Integrity Monitoring for Databases tests systems for common configuration vulnerabilities, monitors changes to these settings, and helps you build a custom security policy to access your sensitive data — providing visibility into potentially dangerous configuration changes and making it easier to demonstrate compliance.

Centralized checks of database configuration settings — Integrity Monitoring for Databases is an easy-to-deploy solution for assessing the security status of the most widely-deployed database platforms (Oracle, Microsoft SQL Server, IBM DB2, and MySQL) across an enterprise, including version/patch level, audit settings, configuration parameters, and privileges.

Improved visibility into database security posture — By evaluating and monitoring database configuration settings and access to sensitive data, organizations can demonstrate compliance and minimize the likelihood of a breach.

Streamlined software upgrades — Upgrade your software easily without impacting existing operations or performance with a simple path to more advanced capabilities. You can enhance core security by adding McAfee Vulnerability Manager for Databases (with much more extensive testing of database servers) and McAfee Database Activity Monitoring (with customizable rules and intrusion prevention).

Features & Benefits

Save time and money with faster deployment and more efficient architecture

Start testing and monitoring database servers immediately. You can install McAfee Integrity Monitoring for Databases without requiring any changes to your database systems.

Increase your flexibility by deploying on the IT infrastructure of your choice

Install Integrity Monitoring for Databases on physical servers, along with the database on virtual machines, and deploy remotely on cloud servers.

Get real-time notification of changes to settings that may impact database security

Monitor and log high-risk transactions, including DDL, drop/alter table, privilege grants, and changes to audit settings and relevant configuration parameters. Generate a trusted audit log for configuration changes that could impact security.

Receive out-of-the-box regulatory compliance reports

Generate preconfigured reports for compliance regulations and create custom reports identifying administrative users, expired users, database properties, and more.

Support virtualization and cloud computing environments

Provision sensors along with the database on each virtual machine, and deploy on cloud servers to enable remote testing and monitoring.

System Requirements

These are minimum system requirements only. Actual requirements will vary depending on the nature of your environment.

Minimum System Requirements

  • McAfee ePolicy Orchestrator 4.5
  • Microsoft Windows Server 2003 with Service Pack 2 (SP2) or higher
  • Microsoft SQL Server 2005 with SP1 or higher
  • 2 GB RAM
  • 1 GB free disk space
  • Browser (for management console): Firefox 2.0 or later, or Microsoft Internet Explorer 7.0 or later

Supported Databases for Monitoring

  • Oracle version 8.1.7 or later, running on Sun Solaris, IBM AIX, Linux, HP-UX, Microsoft Windows
  • Microsoft SQL Server 2000 or later on any supported Windows platform
  • Sybase ASE 12.5 on all supported platforms

Demos / Videos

Demos

Use a single solution and achieve continuous compliance with McAfee Configuration Control.

Videos

News / Events

News

Events

No results found

Resources

Data Sheets

McAfee Integrity Monitoring for Databases

For a technical summary on the McAfee product listed above, please view the product data sheet.

Solution Briefs

White Papers

Community

Forums

No results found

Blogs

  • NCCDC 2013 – Red Team Recap
    Jim Walter - May 07, 2013
              This past April (4/19 to 4/21) I had the great pleasure and experience of joining the Red Team at 9th NCCDC competition.   It was actually my 2nd year on the Red Team and 4th year to attend in total (I judged in 2010 and 2011).  McAfee is actually a perpetual Read more...
  • RDP+RCE=Bad News (MS12-020)
    Jim Walter - March 14, 2012
    See March 15 and 16 updates at the end of this blog. —————————————————-   The March Security Bulletin release from Microsoft was relatively light in volume. Out of the six bulletins released, only one was rated as Critical. And for good reason. MS12-020 includes CVE-2012-0002. This flaw is specific to the Remote Desktop Protocol (RDP) present on Read more...
  • An Update on DNSChanger and Rogue DNS Servers
    Jim Walter - March 06, 2012
    In late 2011, the FBI released documents and data focusing on “Operation Ghost Click.” This malicious operation, leveraging a variety of DNSChanger-type malware, was defined by the FBI as an “international cyber ring that infected millions of computers.” Associated malware samples and events can be traced back several years, and multiple platforms were targeted. To this day many remain Read more...
  • McAfee Q4 Threats Report Shows Malware Surpassed 75 Million Samples in 2011
    David Marcus - February 21, 2012
    Today we released our Fourth Quarter 2011 Threat Report, revealing that malware surpassed the our estimate of 75 million unique malware samples last year. Although the release of new malware slowed a bit in Q4, mobile malware continued to increase and recorded its busiest year to date. Malware The overall growth of PC-based malware actually Read more...
  • Cultural Security: Promoting Security Policies Using Organizational Culture
    Steven Fox - September 06, 2011
    Most of us refer to security policies in much the same way as we refer to our car manuals – when something unexpected happens.  We know these documents have useful information.  However, their utility is tied to situations where answers do not present themselves readily. According to Chris Noel, SVP of Product Management at ANXeBusiness, Read more...