NetForensic Product Tracks Database Attacks

nFX Data One monitors databases and Web sites for application-layer attacks

April 26, 2007

2 Min Read
Network Computing logo


A lot of vendors are moving into the data-protection arena, but netForensics has a good head start because of its product history in event correlation and incident detection. What's slightly unusual about the approach is monitoring both HTTP and SQL activity. While competitor Imperva is capable of doing similar monitoring with an additional SecureSphere Web Application Firewall supplementing its database security line, few other database-leakage vendors are taking this more holistic approach to detecting incidents. If netForensics gets it right, it could have a solid product on its hands.
Jordan Wiens
NWC Contributing Technology Editor

NetForensics this week launched a new enterprise database-monitoring product that can help IT protect Web and database applications from attack.

Working in conjunction with netForensics nFX Open Security Platform, the new nFX Data One provides security monitoring, including the ability to identify and remediate threats and gather data and audit trails for policy enforcement, comliance and security forensics, the vendor said.The product works by providing continuous, real-time logging of all SQL and HTTP activity by analyzing the underlying Web and database application protocols--including all logins, logouts, failed logins and unauthorized access attempts. Deep-packet-inspection capabilities let the product work with a broad range of databases while minimizing the impact on database and application performance, netForensics said.

Database monitoring and extrusion protection is becoming an important security step to both secure enterprise data and maintain financial audit and regulatory compliance.

nFX Data One is available today as an appliance or software.

RELATED LINKS
bullet Review: Extrusion-Prevention Systems
In this kickoff to our extrusion-prevention rolling review, we analyze the market, lay out the vendor invitation and describe the test bed.

bullet Rolling Review: Imperva's Secure Sphere
A strong start to our database extrusion-detection/-prevention series, Imperva's Secure Sphere is quick to learn user behavior, and its numerous signatures let it handily block known attacks against both the database server and the underlying OS.

SUBSCRIBE TO OUR NEWSLETTER
Stay informed! Sign up to get expert advice and insight delivered direct to your inbox
More Insights