InfoSphere Guardium Data-Level Access Control

Overview

InfoSphere™ Guardium® Data-Level Access Control monitors all database connections, blocking unauthorized activities to sensitive data based on granular, real‐time policies.

Most organizations struggle with enforcing database controls, particularly with respect to privileged users that have unrestricted rights. Native DBMS controls are ineffective and newer technologies like database activity monitoring can detect, but not prevent unauthorized access and changes.

Complements InfoSphere Guardium Database Activity Monitor by allowing real-time blocking to be specified as a preventive action in response to policy violations.
Enables privileged users like DBAs to be blocked from viewing or changing sensitive data, creating new user accounts or elevating privileges.
Has zero impact on application-layer traffic.
Supports IT outsourcing and associated cost savings – without increasing risk.
Supports eight major DBMS platforms on all major operating systems, enabling consistent access control policies to be automatically enforced enterprise-wide.
Can be managed by IT security, risk or compliance teams without detailed database administration skills, enabling effective controls, and enforcing separation of duties.
Examines both database queries and results, enabling powerful and detailed preventive controls to be easily implemented.
Operating systems supported: AIX, HP-UX, Linux, Solaris (Sun microsystems), Windows family, z/OS