McAfee Database Event Monitor for SIEM

McAfee Database Event Monitor for SIEM

Maximum visibility into database transactions without impacting performance

Next Steps:

Overview

The non-intrusive design of McAfee Database Event Monitor for SIEM supports your expanding compliance auditing and reporting requirements and enhances security operations. While it monitors all database transactions, Database Event Monitor for SIEM provides a complete audit trail of all database activities, including queries, results, authentication activity, and privilege escalations.

Database Event Monitor for SIEM is the only product that both consolidates database activity into a central audit repository and provides normalization, correlation, analysis, and reporting of that activity. It normalizes activity for analysis with other pertinent security information for expanded visibility into user and data interactions, user information, application contents, OS activity, vulnerabilities, and even network location.

Database Event Monitor for SIEM allows you to:

  • Track users across applications
  • Examine full session activity, from login to logoff
  • Detect sensitive data and identify policy violations
  • Detect loss of data through authorized channels
  • Correlate database activity to security events
  • Generate detailed reports for PCI DSS, HIPAA, NERC-CIP, FISMA, GLBA, SOX, and many more compliance requirements
McAfee Positioned in Leaders Quadrant of the Magic Quadrant for SIEM

Features & Benefits

Get compliance reports pre-built and ready to run

Comply with regulations such as PCI DSS, HIPAA, NERC-CIP, FISMA, GLBA, SOX, and others, while strengthening your overall security posture with pre-defined rules and reports and privacy-friendly logging features.

Benefit from integration with other McAfee products

Get full integration with McAfee Enterprise Security Manager and McAfee Enterprise Log Manager for unprecedented event analysis and correlation, in addition to compliant storage and encryption of data activity logs.

Find the data that enables your business

Discover all database instances including unauthorized or rogue databases.

Uncover regulated and confidential data for compliance

Detect when a database contains sensitive information — such as personal identity information — so that you can monitor all access to that information in accordance with PCI DSS, HIPAA, NERC-CIP, and other compliance requirements.

Log database activity for a complete audit trail

Retain details of all database transactions, from login to logoff, to support compliance auditing requirements; masking can protect sensitive personal information in logs.

Reconstruct sessions with one click

Speed investigations of database events by viewing the entire session from login to logoff with a single mouse click.

Monitor your network without compromising database performance or capture rates

Avoid overhead, monitor your database over the network, and ensure the audit data you need is retained.

Integrate database event information into SIEM workflows

Leverage integration with McAfee Enterprise Security Manager as a central resource and interface for all database monitoring and compliance needs, and enable database transactions to be used by event correlation and other advanced SIEM features.

System Requirements

Hardware SpecificationsDSM-4600DSM-3450DSM-2600
Collection Rates 15,000 events per second 10,000 events per second 5,000 events per second
Interfaces 8 x 10/100/1000 Mbps Ethernet copper interfaces 4 x 10/100/1000 Mbps Ethernet copper interfaces 4 x 10/100/1000 Mbps Ethernet copper interfaces

Awards / Reviews

Gartner
McAfee Positioned as a Leader by Gartner in MQ for SIEM Based on Completeness of Vision and Ability to Execute

The security information and event management (SIEM) market is defined by the customer's need to analyze security event data in real time for internal and external threat management, and to collect, store, analyze and report on log data for regulatory compliance and forensics. The vendors that are included in Gartner’s analysis have technologies that have been designed for this purpose, and they actively market and sell these technologies to the security buying center.

Customer Stories

McAfee

McAfee integrates NitroSecurity products into its portfolio, improving its SIEM offering.

Highlights
  • Significantly shortens time to analyze security events from four to six days to less than 10 minutes
  • Decreases time to produce PCI compliance reports from eight to 12 hours to 10 minutes
  • Saves administrative time and manual maintenance while eliminating unnecessary activities
  • Facilitates disaster recovery and allows for proper use of virtual machines
  • Improves the organization’s overall security posture in the industry

News / Events

Resources

Brochures

Focus on 5: Threat Intelligence SIEM Requirements

McAfee spoke with customers about integrating SIEM with Threat Intelligence and how it helped their effort to mitigate bad actors.

Focus on 5: SIEM Requirements

Learn about the top five issues with SIEM: Big Security Data, Content and User Awareness, Dynamic Context, Solution Customization, and Business Value.

Data Sheets

Reports

Technology Blueprints

White Papers

Community

Forums

No results found

Blogs

  • CRN Analysis: McAfee Tops Symantec for Endpoint Protection
    Dan Wolff - May 14, 2013
    This week, CRN pitted McAfee and Symantec head-to-head, evaluating both leading enterprise protection vendors for malware and spyware protection, intrusion prevention, channel profitability and more. The result? While Symantec continues to have a strong portfolio, McAfee came out on top for its central policy management through ePolicy Orchestrator, innovation with hardware-based security technologies, and its Read more...
  • How to create a compensating control for EOL Windows XP Risk
    Kim Singletary - May 13, 2013
    Support for Windows XP SP3 will officially end April 8, 2014, meaning users have less than a year to choose which operating system to go with next. For many, the motivation to move off XP to a new operating system hasn’t been very compelling – while Windows 7 may be a reasonable option, Vista wasn’t Read more...
  • NCCDC 2013 – Red Team Recap
    Jim Walter - May 07, 2013
              This past April (4/19 to 4/21) I had the great pleasure and experience of joining the Red Team at 9th NCCDC competition.   It was actually my 2nd year on the Red Team and 4th year to attend in total (I judged in 2010 and 2011).  McAfee is actually a perpetual Read more...
  • Have you met McAfee SIEM?
    Gretchen Hellman - May 07, 2013
    If you haven’t heard much about McAfee’s fast and smart SIEM, now is the right time to take a look at what the experts are saying. After performing a hands-on review of 12 SIEM products, SC Magazine recently rated McAfee Enterprise Security Manager (ESM) as the SIEM “Best Buy,” with five stars in every category. Read more...
  • Healthcare Cloud Enabled Analytics is Growing
    Kim Singletary - May 02, 2013
    Like any industry, healthcare continues to improve efficiency and reduce costs. Still, it’s an industry that must also take precautions in order to maintain the privacy and security of health information.  Analytics is a growing trend to measure improvements in healthcare, and a recent survey reported that 56.4% are now considering analytics to comply with Read more...