McAfee Security Scanner for Databases
Deep and detailed vulnerability scanning for assessing risks to sensitive data

Features & Benefits:

Prepare for and perform well during a security audit
Detect altered data, including modifications of privileges and user tables, while spotting security issues such as SQL injection vulnerabilities.

Accelerate time to compliance and minimize audit cycles
Use out-of-the-box compliance reports to uncover potential issues before an audit, minimizing the time and cost involved in confirming remediation post-audit.

Deliver speedy fixes to help address vulnerabilities while prioritizing issues
Organize items by priority and review actionable recommendations for remediation. The database browser interface allows for quick application of fixes across multiple databases.

Check password strength in the fastest and most efficient manner possible
Detect weak passwords, shared passwords, and hashes passwords while downloading data for local analysis to avoid affecting database performance.

A Comprehensive, Client-Based Vulnerability Assessment Solution for Protecting Databases

With McAfee Security Scanner for Databases, organizations gain visibility into risks associated with their most valuable and sensitive data, receiving actionable information to address these risks and more easily meet compliance audit requirements while improving overall security for their critical information. With McAfee Security Scanner for Databases, organizations can:

• Automatically discover databases on their networks and determine which ones contain restricted information, such as passwords, credit card details, and personally identifiable information (PII)
• Report on the current version, patch level, and known vulnerabilities for each system, building a view of their current database security posture
• Efficiently test database systems for compliance with various security policies, including password strength, use of shared accounts/passwords, and embedded passwords within applications
• Identify susceptibility to database-specific risks, including SQL injection, buffer overflow, and malicious or insecure PL/SQL code across Oracle, Microsoft SQL Server, IBM DB2, and MySQL databases

Thoroughly Assess the Most Widely Deployed Database Systems

By conducting more than 3,500 different checks of Oracle, Microsoft SQL Server, IBM’s DB2, and MySQL databases, McAfee Security Scanner for Databases provides an optimal, comprehensive assessment, evaluating risk from virtually all known threat vectors. This information can then be used to demonstrate compliance for audit purposes and to improve overall security for an organization’s most valuable data.

Automatically finds databases and identifies those with sensitive records

Many organizations don’t have an accurate view of where all their databases are and which ones contain restricted content. McAfee Security Scanner for Databases searches the network for databases and scans tables for passwords, credit card details, Social Security numbers, and other PII. These discovery features speed deployment and improve coverage, quickly building a complete map of an enterprise’s data at risk.

Built on practical security knowledge to high-light the real issues and recommend fixes

Sometimes less is more, as many vulnerability assessment tools often overwhelm the user with a myriad of minor threats, hiding the critical issues that need to be addressed. McAfee Security Scanner for Databases, developed in conjunction with experts in database security audit, clearly classifies threats into distinct priority levels and goes one step further to provide fix scripts and recommendations whenever possible. The result is a system that focuses effort on the most severe risks and saves time and money by leveraging the knowledge of leading consultants and researchers in terms of how to best fix gaps.

Browser design delivers a simplified assessment task and saves time

The centralized database browser of McAfee Security Scanner for Databases is an indispensable tool for database administrators during the performance of their daily tasks. With the ability to quickly view details for databases anywhere on the network, database administrators can check the configuration of hundreds of databases in parallel, reducing many hours of work to just minutes.

About McAfee Risk and Compliance

McAfee Risk and Compliance products help you minimize risk, automate compliance, and optimize security. Our solutions diagnose your environment for real-time insight into your vulnerabilities and policies so that you can protect your most critical assets by focusing security investments where they matter most. To learn more, visit: www.mcafee.com/riskandcompliance

System Requirements:

These are minimum system requirements only. Actual requirements will vary depending on the nature of your environment.

Minimum system requirements

• Microsoft Windows 7
• Microsoft Windows XP with Service Pack 2 (SP2) or higher

Supported databases for security scanning

• Oracle version 9.1 or later
• Microsoft SQL Server 2000 or later
• Microsoft SQL Azure
• MySQL version 4.0 or later
• PostgreSQL version 6.0 or later
• Sybase ASE 12.5 on all supported platforms
• IBM DB2 version 8.1 or later running on Linux, Unix, and Microsoft Windows

Documentation:

Download the McAfee Security Scanner for Databases Datasheet (PDF).