Policy-based database firewall
GreenSQL enables organizations to define their own security policy using the GreenSQL Policy function. Should there be a breach of policy, you may select to be immediately alerted . The system will respond to a breach in the manner defined by the relevant enacted policy.
GreenSQL Policy has an automated Learning Mode which learns and builds policies, according to the specific usage of each database. You can accept or reject the rules custom made for you. Learning Mode dramatically reduces the operational overhead required to implement a secure and reliable policy for all access to your database.
Similarly, you can manually configure policies and create custom rules by creating Query Groups which consist of patterns to be monitored, allowed or blocked. You can also apply an Intrusion Prevention System (IPS) or Intrusion Detection System (IDS) policy based on a risk profile, anomaly detection and preconfigured signature detection.
Types Of Policies
There are three types of policies which can be defined:
Database Firewall Enables you to create custom rules by specifying the type of the rule (Query Groups or Table Based), source IP address(es), database user(s), application name(s), schedule and patterns or conditions where a query will be blocked, allowed or monitored. You can also enable or disable caching per policy.
Learning Mode Learns database behavior and automatically generates a custom rule policy for each database in accordance with its specific behavior. You may elect to accept or reject the policies generated. This method is quick and comprehensive. GreenSQL provides you the option to enable intrusion detection or prevention during the learning mode process.
Risk Based IPS/IDS Monitors or blocks SQL injection attacks and/or queries according to preconfigured a risk profile. If the IDS policy is selected, GreenSQL will monitor queries detected as intrusions. If the IPS policy is selected, GreenSQL will block queries detected as intrusions.