McAfee Database Activity Monitoring

McAfee Database Activity Monitoring automatically finds databases on your network, protects them with a set of preconfigured defenses, and helps you build a custom security policy for your environment - making it easier to demonstrate compliance to auditors and improve critical asset data protection. Database Activity Monitoring cost-effectively protects your data from all threats by monitoring activity locally on each database server and by alerting or terminating malicious behavior in real time, even when running in virtualized or cloud computing environments.

Comprehensive threat protection
Protect even your unpatched databases against zero-day attacks by blocking attacks that exploit known vulnerabilities and terminating sessions that violate your security policies.

Detailed audit trail reports
Audit trail reports are available to meet SOX, PCI, and other compliance audit requirements. During post-incident forensic analysis, this audit trail can help you understand the amount of lost data and gain greater insight into malicious activity.

Streamlined patching with no required downtime
Applying missing patches and fixing misconfigurations found by the Database Activity Monitoring vulnerability scan will improve the security posture of your databases immediately - without requiring any downtime via McAfee’s virtual patching technology.

Features & Benefits

• Get maximum protection for sensitive data, meet compliance requirements, and reduce exposure to costly breaches - Demonstrate compliance and minimize the likelihood of a breach by monitoring threats to databases from all sources, including network/application users, local privileged accounts, and sophisticated attacks from within the database itself.


• Save time and money with faster deployment and a more efficient architecture - Simplify the process of building custom security policies to audit and protect databases with preconfigured rules and templates.


• Minimize risk and liability by identifying attacks as they occur, and stopping them before they cause damage - Stop breaches by terminating suspicious sessions and quarantining malicious users with real-time monitoring and intrusion prevention for Oracle, Microsoft SQL Server, and Sybase databases.


• Increase your flexibility by deploying McAfee Database Activity Monitoring on the IT infrastructure of your choice - Install sensors on physical servers, provision sensors along with the database on virtual machines, and deploy sensors remotely on cloud servers.


• Discover databases automatically and organize them for monitoring and management - Find databases by scanning the network or by importing them from existing tools, and then group them by vendor, version, or custom tags (for example, HR, finance, or QA).


• Get out-of-the-box protection for known vulnerabilities and common threats - Receive more than 380 predefined rules that address specific issues patched by the database vendors, as well as generic attack profiles.


• Leverage templates for compliance regulations - Use a simple, step-by-step interface for building customized security policies for PCI DSS, SOX, HIPAA, GLBA, and SAS-70, as well as best practices based on experience at hundreds of customer sites.


• Receive granular protection of sensitive data at the object level, regardless of the source of the attack - Evaluate process memory to determine execution plan and affected objects, identifying policy violation even from local users or obfuscated code.