Vulnerability Assessment B+   SecureSphere offers passive and active technologies for vulnerability assessment. Active assessments require DB credentials to log in and retrieve information from the target database, searching for configuration errors, unsafe practices, OS versions, appropriate user privilege levels, etc. Our testing revealed platform configuration issues such as default installation accounts and weak password policy settings as opposed to software vulnerabilities. Passive assessments analyze captured traffic via a sniffer to understand how the database is being utilized. It can identify issues such as account sharing or two individuals logging into the database simultaneously from different sources. Reporting B   SecureSphere ships with a variety of canned reports that provide summary information, trends or technical details. Additional compliance and application reports for SOX, PCI, HIPAA, SAP and Oracle E-Business are also included. You can also create new views or reports and quickly search the stored data. This is useful if you're trying to track the use of a particular source or user. Verdict SecureSphere is an impressive enterprise-ready product for large organizations. Testing methodology: We tested a SecureSphere Database Security Gateway G4 appliance in a lab that contained Microsoft SQL Server 2005 on Windows Server 2003, Oracle 9i on Windows 2000 Server, and Oracle 10g on Sun Solaris 8 and 9.

< PREV PAGE   |   1  |   2  |   NEXT PAGE  >