SQLFirewall 1.7.1

SQLFirewall is exactly what the name implies. It is a firewall for Microsoft SQL Server currently supporting SQL 2005 and SQL 2008.

What does it do?

� Can log all queries against SQL

o Includes

� SPID
� IP Address
� User Name
� Complete T-SQL Command
� Time Called

� Can block queries before they reach SQL.

o For instance: deletes, drops, or specific key words

� Can log based on user or keyword
� Can alert based on multiple indicators

Advantages

� Transparent to End User Applications.
� No impact to the SQL Server (If run on a separate physical box)
� Ability to review a connection�s or user�s queries as they were run.
� Logging for compliance
� Logging for security forensics.
� Doesn�t require proprietary hardware.
� Very small software footprint.

Disadvantages of other existing solutions

� Two existing solution types by competitors:

o Based off of SQL�s internal profiling services.

� Impacts performance of the SQL Server engine.
� Data capture by time and not by user.
� Not based on Real Time Data

o Hardware based

� Expensive
� Cannot block commands, only read packets.
� Only able to decrypt packet headers if signed Certificate Installed.