McAfee Database User Identifier

McAfee Database User Identifier

Trace end-user transactions from applications to the database for accountability and compliance

Next Steps:

Overview

McAfee Database User Identifier accurately identifies end-user activity when using pooled connections from the application to the database, making it possible to hold users accountable for their transactions and helping to bring organizations into compliance with regulations. With Database User Identifier, you can gain visibility into risks to sensitive data and gather actionable information to address these risks.

Dependable end-to-end user tracking — Database User Identifier is installed on JavaEE and .NET application servers as a separate container, where it injects the end-user information into the pooled database connection and associates every database session, SQL statement, and command with individual users.

Software-only solution, non-intrusive, and easy to deploy and maintain — As a software component, Database User Identifier is installed on the application servers and does not require any change to the underlying applications or database management system.

Actionable alerting on specific end-user activity — Information from Database User Identifier can be used by McAfee Database Activity Monitoring to create granular rules to specifically alert or block users based on application activity.

Features & Benefits

Capture the identity of individual users accessing the database

Identify every user action and name, including user details, the URL used, and the client IP address.

Deliver a superior level of accuracy in end-user identification

Get a reliable audit log by appending the application end-user credentials to every transaction hitting the database.

Speed deployment while minimizing overhead and simplifying compliance issues

Avoid development costs associated with changes to underlying applications or database management systems and provide a complete audit trail of user activity.

Gain compliance with regulations that deal with end-user access

Meet strict compliance regulations and standards such as PCI DSS, SOX, HIPAA, and SAS 70 that focus on controlling individual access to sensitive data.

System Requirements

These are minimum system requirements only. Actual requirements will vary depending on the nature of your environment.

Minimum system requirements

  • McAfee ePolicy Orchestrator 4.5
  • Microsoft Windows Server 2003 with Service Pack 2 (SP2) or higher
  • Microsoft SQL Server 2005 with SP1 or higher
  • 2 GB RAM
  • 1 GB free disk space
  • Browser (for management console): Firefox 2.0 or later, or Microsoft Internet Explorer 7.0 or later

Supported databases for user identification

  • Oracle version 8.1.7 or later, running on Sun Solaris, IBM AIX, Linux, HP-UX, Microsoft Windows
  • Microsoft SQL Server 2000 or later on any supported Windows platform
  • Sybase ASE 12.5 on all supported platforms

News / Events

News

Events

No results found

Resources

Data Sheets

McAfee Database User Identifier

For a technical summary on the McAfee product listed above, please view the product data sheet.

White Papers

Community

Forums

No results found

Blogs

  • Urchins, LizaMoons, Tigers, and Bears
    Jim Walter - October 21, 2011
    In early April, I wrote about the famed “LizaMoon” SQL-injection attacks. I said it then, and I’ll say it again now: SQL-injection (SQLi) attacks are a constant. Some of these attacks are more visible than others.  Some adversaries find intelligent ways to hide their tracks so as not to splatter evidence of their misdeeds all over various search Read more...
  • In the Wake of the Week: Need Sleep
    Lang Tibbils - October 07, 2011
    They are keeping me busy here at McAfee. Beginning to think that “Safe” isn’t the only thing that “Never Sleeps” around here. This weeks highlights include, our re-designed channel partner website, a blog recap of the Sept. 12 Global Channel Partner Town Hall Meeting, staying focused while attending the McAfee Partner Summit, a new market Read more...
  • Building an Arsenal of Best-in-Breed Database Security Solutions
    Eric Schou - August 19, 2011
    Visit any news site on the Web, and undoubtedly you’ll come across a barrage of articles publicizing the details of yet another data breach. With the prominence of SQL injection attacks, and malicious insiders and hackers exploiting sensitive data stored on unpatched and vulnerable databases, enterprise organizations have found themselves reevaluating their security strategies. Following Read more...
  • McAfee Acquires Leading Provider of Database Security Technology
    David DeWalt - April 06, 2011
    I am excited to announce another important milestone in our growth as the world’s largest dedicated security company.  Today, McAfee completed the acquisition of privately owned Sentrigo, a leading provider of database security and compliance, assessment, monitoring and intrusion prevention solutions. Through this acquisition, we believe McAfee can broaden its security portfolio to now secure Read more...
  • Database Security: A Profitable and Differentiated Offering
    MFEChannelChief - March 30, 2011
    Find out how McAfee partners can add recently-acquired Sentrigo solutions to their portfolio.