Features and Benefits

Auditing Technology: InTrust for Databases has a unique, patent-pending collection technology which captures all database activity from within the database engine, regardless of its origin. This technology ensures full capture at the source, while preventing database administrators from tampering with it. It does not rely on native auditing.

Data Transport: InTrust for Databases has a highly encrypted communication channel between the data collecting agent and the server. The channel is also fault-tolerant with a buffering scheme that prevents loss of audit data due to network and server outages.

Encrypted Tamper-Proof Repository: The repository stores all database activity using a highly efficient storage engine. Data integrity is preserved with a hardened, tamper-proof technology that uses FIPS grade encryption. InTrust detects any attempt to edit or tamper with the repository. It employs an easy-to-use, single-click archive strategy, making it easy to manage data retention requirements.

Real-Time Policy Enforcement Engine: InTrust for Databases has a high-performance rule engine designed for processing the huge volumes of activity running through the system. Its profile and policy scheme were uniquely crafted to allow easy definition of cross-database and cross- platform policies, while maintaining the different characteristics of each database. Users can then set real-time alerts for each policy.

Asset Profiling: InTrust for Databases encourages customers to profile their assets, which is an important compliance activity. It then uses this information to drive the policies and rule engines to obtain the most out of the information provided by the customer.

Versioning: All of the policy and profile information in InTrust for Databases is never deleted and tamper-proof. The result is a reliable, full-history view of all configurations and changes done in the product.

Ticketing System: InTrust has its own internal ticketing system to preserve an artifact of each incident investigation, and a link back to the offending sessions and SQL statements. The system allows you to see both the incidents that occurred, as well as the resulting investigation and conclusion. It is possible to use other ticketing systems and only use the incident storage of the system, but a ticketing workflow engine is available within the product.

Forensics Investigation: InTrust for Databases contains a unique feature that allows investigation into activity-related incidences—as a result, activity that wasn’t originally flagged as suspicious can still be viewed in hindsight.

Separate Consoles: InTrust for Databases integrates separation of duties within its design. Two consoles separate day-to-day tasks from administrative operations. The consoles as well as the internal authentication scheme ensure separation of duties. All communication to the consoles is highly encrypted and each console allows for the proper user workflow of its target audience.

Streamlined Reporting: InTrust for Databases contains built-in reports designed to address your standard compliance needs. For customers who desire flexibility of customized reports beyond what comes out of the box, InTrust for Databases integrates with Microsoft Reporting Services.