McAfee Vulnerability Manager for Databases

McAfee Vulnerability Manager for Databases Overview:

McAfee Vulnerability Manager for Databases automatically discovers databases on your network, determines if the latest patches have been applied, and tests for common weaknesses such as weak passwords, default accounts, and other common threats. Vulnerability Manager for Databases conducts more than 3,000 vulnerability checks against leading database systems such as Oracle, Microsoft SQL Server, IBM DB2, and MySQL.

Description:

Most vulnerability assessment products don't know enough about database security to thoroughly test them, putting the data at risk. The trends show that the largest data breaches occur from databases. By improving visibility into database vulnerabilities and providing expert recommendations for remediation, McAfee Vulnerability Manager for Databases reduces the likelihood of a damaging breach, and saves money through better preparation for audits and compliance with regulatory mandates.

Unlike other products that overwhelm you with a myriad of minor threats hiding the critical issues that must be addressed, Vulnerability Manager for Databases evaluates risk from all known threat vectors and clearly classifies threats into distinct priority levels, provides fix scripts, and includes recommendations.

Clear visibility into database vulnerabilities — By improving visibility into database vulnerabilities and providing expert recommendations for remediation, Vulnerability Manager for Databases reduces the likelihood of a damaging breach, and saves money through better preparation for audits and compliance with regulatory mandates.

Risk evaluation from all known threat vectors — Unlike other products that overwhelm you with a myriad of minor threats hiding the critical issues that must be addressed, Vulnerability Manager for Databases evaluates risk from all known threat vectors and clearly classifies threats into distinct priority levels, provides fix scripts, and includes recommendations.

Benefits and Features:

Solutions:

A comprehensive assessment of the risk to your most sensitive data

You store your most valuable and sensitive data in a database, but most vulnerability assessment products don’t know enough about database systems to thoroughly test them, putting your data at risk. Practically every week there’s yet another announcement of a major data breach. Research shows that the largest breaches, representing 75 percent of records compromised, according to Verizon’s 2009 study1, come from databases. McAfee® Vulnerability Manager for Databases automatically discovers databases on your network; determines if the latest patches have been applied; and tests for common weaknesses, such as weak passwords, default accounts, and others, making it easier than ever to demonstrate regulatory compliance and better protect critical data.

Conducting more than 3,000 vulnerability checks against leading database systems such as Oracle, Microsoft SQL Server, IBM DB2, and MySQL databases, McAfee Vulnerability Manager for Databases evaluates risk from virtually every threat vector. But, unlike other products where scan results can often overwhelm you with a myriad of minor threats hiding the critical issues that need to be addressed, McAfee Vulnerability Manager for Databases goes far beyond that. Based on input from database security experts, it clearly classifies threats into distinct priority levels and provides fix scripts as well as recommendations.

By improving visibility into database vulnerabilities— and providing expert recommendations for remediation— McAfee Vulnerability Manager for Databases reduces the likelihood of a damaging breach and saves money through better preparation for regulatory compliance audits.

The Fastest Path to Database Compliance
With a set of features designed to speed initial scans and out-of-the-box reports to address most compliance requirements, McAfee Vulnerability Manager for Databases delivers audit-ready results with minimal resources.

To get your first assessment completed quickly, McAfee Vulnerability Manager for Databases:

• Automates discovery of databases on the network
• Locates and identifies tables containing sensitive information
• Conducts a quick port scan providing database version and patch status
• Presents findings in preconfigured reports for various compliance standards

High-Speed, High-Efficiency Password Checking
Compromised passwords are responsible for a significant percentage of data breaches and hackers have become much more automated in their attacks based on simply guessing passwords. Basic security principles include avoiding weak passwords and preventing sharing of passwords across users and accounts, but how do you know it’s happening?

McAfee Vulnerability Manager for Databases offers the fastest weak password detection methods available, flagging accounts with simple passwords, default passwords, and shared passwords. It can even scan hashed passwords, stored, for example, in SHA-1, MD5, or DES.

By using direct connections to databases, password checking is accomplished without significant load on the database server and does not lock out users for excessive login attempts.

Built on Proven Database Security Expertise
Database management systems are complex, introducing their own set of security risks, some of which are similar to other system software (such as patch updates, password strength, and others) and some of which are unique to databases (such as threats from SQL injection or buffer overflow exploits). McAfee Vulnerability Manager for Databases comes from the team that’s credited with contributions in six of the last seven critical patch updates (CPUs) that Oracle released. It leverages the expertise of leading database security practitioners to:

• Identify susceptibility to database-specific risks, including SQL injection, buffer overflow, and malicious or insecure PL/SQL code
• Prioritize findings and highlight the “real” issues needing immediate attention
• Provide actionable intelligence on how to address risks, including fix scripts whenever possible
• Allow security and compliance users with limited database knowledge to quickly understand risks to sensitive data and how to remediate them

Integration with the McAfee ePolicy Orchestrator® (McAfee ePO™) Platform for Maximum Visibility
McAfee Vulnerability Manager for Databases is integrated with the McAfee ePO dashboard, providing centralized reporting and summary information for all your databases from a consolidated dashboard. It delivers detailed information and scan configuration as well as direct links to invoke the vulnerability scanning management console with granular control over every operation.

System Requirements:

These are minimum system requirements only. Actual requirements will vary depending on the nature of your environment.

Minimum System Requirements

• McAfee ePolicy Orchestrator (ePO) 4.5
• Microsoft Windows Server 2003 Service Pack 2 (SP2) or higher
• Microsoft SQL Server 2005 SP1 or higher
• 2-GB RAM
• 1-GB free disk space
• Browser (for management console): Firefox 2.0 or later, or Microsoft Internet Explorer 7.0 or later

Supported Databases for Scanning

• Oracle 8i or later
• Microsoft SQL Server 2000 or later
• Microsoft SQL Azure
• IBM DB2 8.1 or later for Linux, Unix, and Windows
• MySQL version 4.0 or later
• PostgreSQL version 8.3 or later
• Sybase ASE version 12.5 or later

Documentation:

Download the McAfee Vulnerability Manager for Databases Datasheet (PDF).