14/02-11   -   Press releases

Oracle Database Firewall – First Line of Defense for Databases – Now Available

Network-Based Security Software Monitors Traffic and Helps Prevent Attacks from Reaching Oracle and Non-Oracle Databases

News Facts

o To help organisations prevent sophisticated internal and external attacks from reaching their enterprise databases, Oracle today announced the availability of Oracle® Database Firewall.

o Oracle Database Firewall establishes a defensive perimeter around databases, monitoring and enforcing normal application behavior in real-time, helping to prevent SQL injection attacks and unauthorized attempts to access sensitive information.

o Using innovative SQL grammar analysis technology, Oracle Database Firewall examines SQL statements sent to the database and determines with high accuracy whether to pass, log, alert, block or substitute SQL statements based on pre-defined policies including:

- o White list policies that refer to the approved SQL statements the firewall will pass through as normal while the rest can be blocked;

- o Black list policies refer to the list of unauthorized SQL statements that are blocked specifically;

- o Exception policies offer the flexibility to override applicable security policies to support patching, custom batch jobs, and/or break-glass administrative controls; and,

- o Policies utilizing attributes such as time of day, IP address, application, user, and SQL category.

o Simple to deploy, Oracle Database Firewall does not require any changes to existing applications, the database infrastructure or the existing operating system of the target database.

o Oracle Database Firewall can be deployed in-line on the network for both blocking and monitoring or out-of-band for monitoring-only mode.

o The Oracle Database Firewall is a complete software solution that runs on Intel-based hardware, and can easily scale to support large numbers of database servers.

o With dozens of prebuilt and customisable reports, the Oracle Database Fihttp://twitter.com/OracleDatabaserewall helps organizations comply with privacy and regulatory mandates such as Payment Card Industry (PCI) Data Security Standard (DSS), Sarbanes-Oxley (SOX), and Health Insurance Portability and Accountability Act (HIPAA).

o Oracle Database Firewall is available today for use with:

- o Oracle Database 11g and previous releases;
- o IBM DB2 for Linux, UNIX and Windows (versions 9.x);
- o Microsoft SQL Server 2000, 2005 and 2008;
- o Sybase Adaptive Server Enterprise (ASE) (versions 12.5.4 to 15); and,
- o Sybase SQL Anywhere V10.

o As part of Oracle´s comprehensive portfolio of database security solutions, Oracle Database Firewall complements Oracle Advanced Security, Oracle Audit Vault and Oracle Database Vault. Together, the products support Oracle’s commitment to provide customers with the most comprehensive and advanced security offerings that help reduce the costs and complexity of securing their business information across the enterprise.

Supporting Quote:

"Evolving threats to databases require enterprises to look at new security solutions," said Vipin Samar, vice president of Database Security, Oracle. “Oracle Database Firewall offers organizations a first line of defense that can stop internal and external attacks from reaching databases. Easy to deploy and manage, Oracle Database Firewall helps reduce the costs and complexity of securing data across the enterprise without requiring any changes to existing applications and databases."

Supporting Resources

- About Oracle Database Firewall
http://www.oracle.com/us/products/database/database-firewall-160528.html

- Read the Oracle Database Firewall Data Sheet
http://www.oracle.com/us/products/database/database-firewall-ds-302479.pdf

- Read the Oracle Database Firewall White Paper
http://www.oracle.com/us/products/database/bwp-oracle-database-firewall-302484.pdf

- Access the Oracle Database Firewall Resource Kit
http://www.oracle.com/go/?&Src=7011681&Act=542&pcode=WWMK10035434MPP024

- About Oracle Database Security
http://www.oracle.com/database/security

- About Oracle Database 11g
http://www.oracle.com/database

Connect with Oracle Database via Blog (http://blogs.oracle.com/databaseinsider/), Facebook (http://bit.ly/cL4p4z) and Twitter (http://twitter.com/OracleDatabase)


For more information contact:

Oracle UK Press Office
CMG Team
t:+44 (0) 844 875 1455
e: Oracleuk@cmgrp.com


About Oracle

Oracle (NASDAQ: ORCL) is the world´s most complete, open, and integrated business software and hardware systems company. For more information about Oracle, please visit our Web site at http://www.oracle.com.

Trademarks

Oracle and Java are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners.