A result of their acquisition of IPLocks technology earlier this year, the new FortiDB product line from Fortinet is especially targeted to the assessment and reporting of potential security and compliance violations in databases. The vendor states that multiple DBs are supported by the product (specifically listed are Oracle, DB2, Sybase and SQL Server), with the initial appliance entry in the product line--the FortiDB-1000B--targeted to mid-Enterprise deployment and supporting up to 30 concurrent DBs. The vendor expects to release further appliances for low and high end deployments (supporting 10 and 60 concurrent DBs, respectively) later this year and next year.

The product ships with "hundreds" of pre-defined policies based on regulations (PCI, SOX, GLBA, and HIPAA are specifically noted), known exploits, and best practices covering such issues as weak passwords, configuration problems, OS issues, and data access privilege analysis. Provided, out-of-the-box reports offer "Expert-Level" remediation advice on compliance requirements.

Management of/access to the device is via a Web-based GUI, with the vendor noting that DB analysis is via an agent-less methodology. Auto-Discovery finds network DBs both across WAN and subnet boundaries, and assessments can be automated via scheduling or scripting.

In addition to the FortiDB appliance line, the vendor notes that an Enterprise Software Version of the product is available with support for hundreds of databases, licensed per database instance. The Enterprise Software Version supports Windows XP/2003/Vista, AIX, Solaris, and Red Hat Enterprise Linux.

Contact Fortinet for further information.