FISMA News

nFX Data One Provides Organizations with Enhanced User-Session Tracking and Improved Reporting Framework to Address Compliance Requirements

(Dec 12, 2007)-- netForensics, a leader in security compliance solutions, today announced version 3.0 of nFX Data OneTM, its comprehensive security database monitoring solution that helps protect databases from unauthorized or malicious activities. New features include enhanced user session tracking, a more robust reporting framework, integration with change management systems, improved exception-management and support for MySQL 5.0. Together with nFX SIM One, netForensics’ flagship security information management (SIM) product, netForensics gives organizations the ability to identify and neutralize possible threats and data breaches from the perimeter to the core.

nFX Data One monitors database activity without compromising database performance, and analyzes traffic in real-time to alert users when violations occur. This new version now supports a session ID metric in the alert and audit trail messages which is a unique identifier across nFX Data One servers. This allows for enhanced correlation between the database event and the session, improving the organization’s ability to identify and defend against real threats. Users can easily navigate between a database event and user session audit trail to view the whole picture. The session ID metric also enables nFX Data One to reconnect to the same session after a re-start to allow users to revisit the exact session they were previously viewing, providing more management and control over the analysis process.

Redesigned Reporting Helps Meet Compliance Demands

In addition, netForensics offers a complete redesign of nFX Data One reports to provide extensive filtering on all metrics to support rapid searching, dynamic sorting of reports and report scheduling. Users can dynamically sort within reports and have the opportunity to schedule reports. Further, this new reporting framework offers users the ability to choose multiple criteria with advanced searches. As part of the new reporting framework, nFX Data One provides users with object usage analysis and integration with change management systems via the Database Insight Report and the new Database Change Tracking Report.

Object usage analysis identifies commands and tables in the SQL query text so access can be determined at the table level. The new Database Insight Report offers multi-level drill-down and filtering capabilities to search for user commands issued against specific server tables. Users can search for update queries executed against table “xyz” by a user in a certain database during a specific time period. Alternately, users can drill-down from a high-level view by issuing commands against certain servers, then further drilling down by database and table to find the exact query and user. Administrators can run these reports on the fly or at scheduled intervals.

nFX Data One’s new change tracking integration allows users to reconcile legitimate database changes against a change management control system and identify of “out of process” changes to look for anomalies and violations. Integration with market-leading change management systems enables administrators to automatically monitor and track approved changes so that anomalies or violations cannot sneak by an unsuspecting administrator. Reconciliation is automated with a new reporting process so that administrators do not need to track legitimate changes manually. This ensures administrators can easily get the core of the issue without wasting time.

Additional improvements include intelligent, exception-based data parsing that ensures reliability of nFX Data One for audit, compliance, and forensics purposes, enhancements to the administration console to improve usability, and support for MySQL 5.0.

Share or bookmarklet this web page at: