SQLsecure
Identify and mitigate SQL Server security risks
Product Highlights:
- Evaluate the state of security across all
- SQL Servers
- Analyze user and group effective access rights
- View inherited rights on server or database objects
- Receive proactive alerts on security risks and vulnerabilities
- Track compliance with security standards from DISA, CIS and NSA
- Satisfy audit requirements with entitlement reports
Idera SQLsecure helps to identify holes in SQL Server security and ensure compliance with increasing audit requirements. SQLsecure collects and analyzes permissions data from SQL Server and Active Directory as well as the file system and registry to show who has access to what database objects and how that access is granted. SQLsecure also monitors changes made to access rights so that unwanted changes can be easily identified and fixed. In SQLsecure also collects and evaluates key security settings within SQL Server and provides pro-active recommendations to improve server security.
Powerful Security Model Analyses
Security Model Analysis – SQLsecure gathers a complete picture of the security of your SQL Server environment, including:
Effective User Permissions – select a user and discover all assigned and effective rights at the server, database and object level.
Users and Groups – drill up or down on users and groups. From a group, see the list of group members and select a member for further analysis. From a user, see the group memberships and drill upwards to review the inherited permissions.
Object Access Rights – browse and analyze the full SQL Server object tree from server level down to object level, tables, roles, endpoints and more. Instantly view assigned and effective/inherited permissions and security related properties at any object level.
Detect Threats, Changes and Policy Violations
SQLsecure contains built-in best-practice security policies and remediation guidance based on known standards from organizations such as DISA, CIS, NIST, and others. Additionally, you can create custom policies to track compliance with your own corporate standards. Policy reports evaluate the state of security on your servers and built-in alerts notify you immediately when servers fall out of compliance.
Comprehensive Security and Entitlement Reporting
SQLsecure provides built-in reports designed in partnership with IT security professionals and major auditing firms to support compliance standards such as ISO and COBIT.
Regulations Covered
- SOA Sarbanes-Oxley Act Section 404 (COSO, CobiT)
- VISA CISP
- HIPAA Health Insurance Portability And Accountability Act of 1996
- GLBA Gramm-Leach-Bliley Act of 1999
- NERC Standard 1200
- FISMA (NIST 800-53 Draft)
- Basel II Capital Accord (ISO 17799:2000)
- PCI DSS v 1.1 Payment Card Industry
Standards, Policies and Guidelines Covered
- ISO 17799:2000
- CIS Benchmark for SQL Server
- DISA Database STIG Security Checklist for MS SQL Server
- NSA Systems and Network Attack Center (SNAC) Guidelines for SQL Server 2000
Requirements:
Windows 2000 SP3, Windows XP SP2, Windows Server 2003 SP1, Windows Vista BE
Microsoft .NET 2.0
SQL Server 2005 or 2000
SQL Server 2005 or 2000
SQL Server 2008 (experimental)
SQLsecure does not install any components, DLLs, scripts, stored procedures or tables on the SQL Server instances being monitored.
|
