McAfee Database User Identifier

McAfee Database User Identifier accurately identifies end-user activity when using pooled connections from the application to the database, making it possible to hold users accountable for their transactions and helping to bring organizations into compliance with regulations. With Database User Identifier, you can gain visibility into risks to sensitive data and gather actionable information to address these risks.

Dependable end-to-end user tracking
Database User Identifier is installed on JavaEE and .NET application servers as a separate container, where it injects the end-user information into the pooled database connection and associates every database session, SQL statement, and command with individual users.

Software-only solution, non-intrusive, and easy to deploy and maintain
As a software component, Database User Identifier is installed on the application servers and does not require any change to the underlying applications or database management system.

Actionable alerting on specific end-user activity
Information from Database User Identifier can be used by McAfee Database Activity Monitoring to create granular rules to specifically alert or block users based on application activity.

Features & Benefits

• Capture the identity of individual users accessing the database - Identify every user action and name, including user details, the URL used, and the client IP address.


• Deliver a superior level of accuracy in end-user identification - Get a reliable audit log by appending the application end-user credentials to every transaction hitting the database.


• Speed deployment while minimizing overhead and simplifying compliance issues - Avoid development costs associated with changes to underlying applications or database management systems and provide a complete audit trail of user activity.


• Gain compliance with regulations that deal with end-user access - Meet strict compliance regulations and standards such as PCI DSS, SOX, HIPAA, and SAS 70 that focus on controlling individual access to sensitive data.