Fortinet FortiDB 1000C

Overview:

Designed for mid-sized enterprises, the FortiDB-1000C appliance provides a comprehensive database security and compliance solution. Through its web-based interface, the FortiDB-1000C centrally monitors, audits and scans multiple distributed, heterogeneous databases. This ensures consistent database security policies across the organization without imposing high management burdens on your database admin and IT staff.

FortiDB-1000C Features & Benefits:

• Comprehensive protection for up to 30 database servers against internal and external threats
• Easy deployment of database activity monitoring and audit (DMA/DAA) utilizing non-intrusive, flexible data collection
• Ensures consistent policy enforcement in distributed , heterogeneous environments utilizing its Web-based centralized management function
• Provides an independent storage for audit data integrity and performs self-audit
• Out-of-the-box reporting helps you to meet security and compliance requirements such as SOX and PCI
• Quick time-to-value with hundreds of pre-populated policies covering known exploits, configuration weaknesses, and operational risks

Automated Security and Compliance

The FortiDB family of appliances and software delivers a complete Database and Application security product line. It delivers centrally managed security, audit policy compliance and Vulnerability Management (VM) for databases and applications across your extended enterprise. FortiDB enables you to meet the challenges of increasing access to your business-critical data in ERP, CRM, or SCM systems while decreasing the threat of data breach. Its sophisticated database activity monitoring (DAM) and advanced reporting automatically documents your policy compliance with internal policies as well as government or industry regulations such as PCI-DSS,

Comprehensive Monitoring and Audit

FortiDB enforces acceptable use policies and alerts on database security threats. It continuously monitors all access to personally identifiable data (PID) residing in your databases. FortiDB's full-featured monitoring and auditing technology manages critical tasks such as change control, internal controls, privileged user monitoring, privacy protection and policy based auditing. Its change control features keep track of all changes related to database structures and users. This includes both Data Definition Language (DDL) and Data Control Language (DCL). FortiDB also automatically generates user activity baselines for easy policy configuration. FortiDB provides three collection methods - Selective Native Audit, Network Sniffer and Agents. Allowing to utilize all three methods within the same installation, FortiDB provides greater flexibility than any other product.

Detect Weaknesses Automatically

FortiDB's Vulnerability Management features automatically detects new security weaknesses, policy noncompliance. In addition, customers can scan their networks to detect and discover new databases and a Sensitive Data Discovery function allows identifying database elements that hold sensitive data such as credit card numbers, Social Security numbers and much more. FortiDB appliances and software ship with hundreds of pre configured policies that address industry and governmental compliance requirements, as well as security best practices. They include a comprehensive set of standards-based reports that provide specific, actionable information. The FortiGuard Global Threat Research Team provides dynamic policy and signature updates. This industry-leading research and remediation advice enables you to strengthen the integrity and security of your databases quickly and effectively.

Low Impact Total Cost of Ownership (TCO)

Failing to keep up with today’s regulations for data security can be cost prohibitive. FortiDB simplifies the process with regular policy and signature updates via XML, and current industry leading remediation advice that strengthens the integrity and security of databases—mitigating internal threats, managing database vulnerabilities to prevent costly breaches, and improving visibility of access policy security violations. Native audit guarantees a 100% capture rate. And the low impact, non-intrusive agent-less architecture simplifying deployment does not interfere with database operations or put applications at risk.

Features & Benefits:

FortiDB Eases Regulatory Compliance

• Sensitive data discovery; aids in PCIDSS compliance
• Periodic scan of every Database in your network
• Automatic user activity baseline generation for easy configuration
• Built-in best practices for regulations such as SOX
• Out of the box policies for both Security and Audit
• Flexible deployment and web-based management
• Flexible audit data collection methods - native auditing, network sniffer or light-weight agents
• Independent and secure audit storage
• Comprehensive Audit/Compliance reports
• Automated policy updates by FortiGuard services

Technical Specifications:

FortiDB Models	FortiDB-400B	FortiDB-1000C	FortiDB-2000B
FortiDB Models
Hardware Specifications
Security Hardened Platform	Yes	Yes	Yes
Number of Licensed Database Instances	10	30	60
10/100/1000 Interfaces	4	4	4
RAM	2 GB	3 GB	4 GB
Number of Hard Drives	1	1	1
Total Hard Drive Capacity	500 GB (1 TB option)	1 TB (2 TB option)	1 TB (6 TB option)
Storage Key (Boot Image)	1 GB Compact Flash	1 GB USB	1 GB USB
Redundant Hot Swappable Power Supplies	No	No	Yes
Hardware Form Factor	Rack Mount (1-RU)	Rack Mount (1-RU)	Rack Mount (2-RU)
Dimensions
Height	1.7 in (4.5 cm)	1.69 in (4.3 cm)	3.5 in (8.9 cm)
Width	17.25 in (33.7 cm)	17.09 in (43.4 cm)	17.5 in (43.8 cm)
Length	14.5 in (36.8 cm)	24.7 (62.71 cm)	27.5 in (69.8 cm)
Weight	10 lbs (4.5kg)	24.2 lbs (11 kg)	55.3 lbs (25.1 kg)
Environmental
AC Power Required	100 – 240 VAC, 50 – 60 Hz, 4.0 Amp (Max)	100 – 240 VAC, 50 – 60 Hz, 7 Amp (Max)	100 – 240 VAC, 50 – 60 Hz, 9.4 Amp (Max)
Power Consumption (AVG)	121 W	189 W	317 W
Operating Temperature	32 to 104 deg F (0 to 40 deg C)	32 to 104 deg F	50 to 95 deg F (10 to 35 deg C)
Storage Temperature	-31 to 158 deg F (-35 to 70 deg C)	-40 to 149 deg F (-40 to 65 deg C)	-40 to 149 deg F (-40 to 65 deg C)
Humidity	20-90% non-condensing	5 to 95% non-condensing	20 to 80% non-condensing
Compliance
	FCC Class A, CE, UL/CB/CUL	FCC Class A Part 115 / CE Mark	FCC Class A Part 115 / CE Mark
Supported Platforms
Database	DB2 UDB V8 (VA only), DB2 UDB V9.x (VA only), DB2 UDB V9.5, DB2 UDB V9.7, MS SQL Server 2000, MS SQL Server 2005, MS SQL Server 2008, MySQL 5.1, Oracle 9i, Oracle 10 gR1 (VA only), Oracle 10gR2,
Repository Database	Apache Derby 10.x, Microsoft SQL Server 2005, Microsoft SQL Server
Browser	Internet Explorer 7,8; Firefox 3,4,5

Screenshots:

FortiDB Software

Fortinet also gives you the ability to deploy FortiDB database security software on a range of software platforms. You can install FortiDB on Red Hat Linux, AIX, Solaris 10, Windows XP/Vista, Windows Server 2003, as well as virtualized environments. FortiDB software delivers the same centralized policy management for vulnerability management and database activity monitoring as FortiDB appliances.

Dashboard FortiDB's dashboard displays essential Vulnerability Assessment and Database Activity Monitoring/Audit information.	Activity Profiling FortiDB automatically generates user activity baselines for easy policy configuration.
Alert Summary High level overview of alerts and trends.	Alerts Analysis Detailed trend analysis allows users to improve their internal control infrastructure.

Services & Support:

FortiGuard Security Subscription Services

FortiGuard Security Subscription Services deliver dynamic, automated updates for Fortinet products. The Fortinet Global Security Research Team creates these updates to ensure up-to-date protection against sophisticated threats. Subscriptions include antivirus, intrusion prevention, web filtering, antispam, vulnerability and compliance management, application control, and database security services.

FortiCare Support Services

FortiCare Support Services provide global support for all Fortinet products and services. FortiCare support enables your Fortinet products to perform optimally. Support plans start with 8x5 Enhanced Support with "return and replace" hardware replacement or 24x7 Comprehensive Support with advanced replacement. Options include Premium Support, Premium RMA, and Professional Services. All hardware products include a 1-year limited hardware warranty and 90-day limited software warranty.

Documentation:

Download the Fortinet FortiDB Database Security Datasheet (PDF).