Fortinet Helps DBAs Sniff Out DB Exploits

Fortinet, a unified threat management concern, hopes its new database vulnerability detection product can help database administrators sniff out exploits on enterprise systems before they can do any damage.

The Sunnyvale Calif.-based independent service vendor announced the launch of the FortiDB-1000B, a new security appliance to protect businesses against data theft from their corporate databases.

The device is designed as a diagnostic tool to identify and give notifications via the operating system about weaknesses in passwords, access privileges and configuration settings. It also has built-in evaluation and remediation advice for common compliance requirements such as Sarbanes-Oxley 404 and The Payment Card Industry Data Security Standards, which were recently renewed.

Jason Wright, Fortinet's senior product manager for the product, said that for now FortiDB-1000B is slated to mesh well with medium-sized enterprises and allows database administrators to establish an audit trail and monitor possible weaknesses.

"It's another mode of security that hardens the OS," Wright said. "Since the company has a rich history in network security, the logical step is to look at the database specifically, strategically and comprehensively from a security perspective."

The release comes at an appropriate time with a slew of high-profile thefts aimed at that database and with other ISVs such as Sentrigo, Inc., deploying database protection products of their own to complement Windows enterprise environments. For its part, the Fortinet product is compatible with Microsoft SQL Server, Oracle, IBM DB2, Sybase and other database management systems, applications and services. Each Forti-DB appliance is said to have the capacity to support up to 30 concurrent databases.

"We're also planning both low- and high-end versions of the FortiDB product line later in 2008 and 2009, which will be able to support database instances of 10 and 60," said Jason Wright.

Most enterprises hold personal and proprietary electronic data on database programs such as Redmond's SQL Server database application, whose security has been a recent priority for Microsoft due to an increase in SQL injection attacks.

In this environment, said Charles Kolodgy, security analyst for IDC, preventative and detective database products are no longer optional.

"Instead, they are a necessary component to help protect personal information that organizations are obligated to secure," he said.

About the Author

Jabulani Leffall is an award-winning journalist whose work has appeared in the Financial Times of London, Investor's Business Daily, The Economist and CFO Magazine, among others.


  • RAMBleed Side-Channel Attack Method Disclosed by Researchers

    Academic researchers this week published information about another side-channel attack method, called "RAMBleed," that can expose information from memory chips, including encryption key information.

  • Penguin

    Windows 10 Preview Build 18917 Shows Off New Linux Integration

    Microsoft's latest Windows 10 "fast-ring" preview release is showcasing a coming Delivery Optimization enhancement, along with the ability to try the newly emerged Windows Subsystem for Linux version 2.

  • Customizing Microsoft Office 365

    While the overall look and feel of Office 365 is pretty standard across organizations, there are several ways to personalize it and make it fit better with your company's specific needs.

  • Microsoft 365 Business Tenants Getting Conditional Access and Trouble-Ticket Features

    Microsoft added its conditional access security service to Microsoft 365 Business subscriptions, according to a Wednesday announcement, and it also added new trouble-ticket features for Microsoft 365 administrators.

comments powered by Disqus

Office 365 Watch

Sign up for our newsletter.

Terms and Privacy Policy consent

I agree to this site's Privacy Policy.