Fortinet FortiDB 2000B
Database Security and Compliance

Overview:

The FortiDB-2000B appliance provides scalable database vulnerability assessment and compliance solutions for large enterprises in a quickly-installed, easily managed package. Its centralized web-based management application ensures consistent database security policies across the organization without imposing a high management burden on database and IT staff. Following auto-discovery of every database on the network regardless of subnet boundaries, the FortiDB-2000B scans for security problems and provides advice on how to fix them with vulnerability assessments that can be viewed within minutes of installation. Ongoing scans of all your databases assure continued protection based on extensive built-in best practices plus easily-customized individual organizational standards. 24 x 7 database activity monitoring captures all forms of database activity to detect erroneous or malicious activity. Database auditing records all database activity for complete and accurate audit trails, with independent storage for additional security.

Targeting large enterprises the FortiDB-2000B appliance provides scalable database security and compliance solution. Utilizing its flexible policy framework, the FortiDB-2000B allows quick and easy implementation of internal IT control frameworks for database activity monitoring (DAM/DAA), IT audit, and regulatory compliance.

FortiDB-2000B Features & Benefits:

• Enterprise-class protection for up to 60 databases extends built-in database security features for comprehensive protection against internal and external threats.
• Flexible audit data collection methods enable you to utilize native audit, network sniffer or agents to handle complex environments
• Web-based centralized management of multiple distributed, heterogeneous databases enables consistent policy enforcement across the enterprise
• Independent audit storage provides an additional security layer for audit integrity, including self-auditing of FortiDB
• Out-of-the-box reports help you to meet security and compliance requirements such as SOX and PCI
• Quick time-to-value with hundreds of pre-populated policies covering known exploits, configuration weaknesses, and operational risks

Automated Security and Compliance

The FortiDB family of appliances and software delivers a complete Database and Application security product line. It delivers centrally managed security, audit policy compliance and Vulnerability Management (VM) for databases and applications across your extended enterprise. FortiDB enables you to meet the challenges of increasing access to your business-critical data in ERP, CRM, or SCM systems while decreasing the threat of data breach. Its sophisticated database activity monitoring (DAM) and advanced reporting automatically documents your policy compliance with internal policies as well as government or industry regulations such as PCI-DSS,

Comprehensive Monitoring and Audit

FortiDB enforces acceptable use policies and alerts on database security threats. It continuously monitors all access to personally identifiable data (PID) residing in your databases. FortiDB's full-featured monitoring and auditing technology manages critical tasks such as change control, internal controls, privileged user monitoring, privacy protection and policy based auditing. Its change control features keep track of all changes related to database structures and users. This includes both Data Definition Language (DDL) and Data Control Language (DCL). FortiDB also automatically generates user activity baselines for easy policy configuration. FortiDB provides three collection methods - Selective Native Audit, Network Sniffer and Agents. Allowing to utilize all three methods within the same installation, FortiDB provides greater flexibility than any other product.

Detect Weaknesses Automatically

FortiDB's Vulnerability Management features automatically detects new security weaknesses, policy noncompliance. In addition, customers can scan their networks to detect and discover new databases and a Sensitive Data Discovery function allows identifying database elements that hold sensitive data such as credit card numbers, Social Security numbers and much more. FortiDB appliances and software ship with hundreds of pre configured policies that address industry and governmental compmliance requirements, as well as security best practices. They include a comprehensive set of standards-based reports that provide specific, actionable information. The FortiGuard Global Threat Research Team provides dynamic policy and signature updates. This industry-leading research and remediation advice enables you to strengthen the integrity and security of your databases quickly and effectively.

Low Impact Total Cost of Ownership (TCO)

Failing to keep up with today’s regulations for data security can be cost prohibitive. FortiDB simplifies the process with regular policy and signature updates via XML, and current industry leading remediation advice that strengthens the integrity and security of databases—mitigating internal threats, managing database vulnerabilities to prevent costly breaches, and improving visibility of access policy security violations. Native audit guarantees a 100% capture rate. And the low impact, non-intrusive agent-less architecture simplifying deployment does not interfere with database operations or put applications at risk.