What Is It?

SQLFirewall is exactly what the name implies. It is a firewall for Microsoft SQL Server currently supporting SQL 2005 and SQL 2008.

What does it do?

Can log all queries against SQL
o Includes
§ SPID
§ IP Address
§ User Name
§ Complete T-SQL Command
§ Time Called

Can block queries before they reach SQL.
§ For instance: deletes, drops, or specific key words

Can log based on user or keyword

Can alert based on multiple indicators


Advantages

Transparent to End User Applications.

No impact to the SQL Server (If run on a separate physical box)

Ability to review a connection’s or user’s queries as they were run.

Logging for compliance.

Logging for security forensics.

Doesn’t require proprietary hardware.

Very small software footprint.


Disadvantages of other existing solutions

Two existing solution types by competitors:
o Based off of SQL’s internal profiling services.
§ Impacts performance of the SQL Server engine.
§ Data capture by time and not by user.
§ Not based on Real Time Data
o Hardware based
§ Expensive
§ Cannot block commands, only read packets.
§ Only able to decrypt packet headers if signed Certificate Installed.

Win7 x32, Win7 x64, WinServer, WinVista, WinVista x64, WinXP

Windows Server 2000 or greater, . NET Framework 3. 5 , SQL 2005 or greater

ms sql firewall, sql 2005 firewall, sql firewall, sql server firewall, SQLFirewall, sql 2008 firewall

simple database, viewer, BCP, win32, stata, web database, perl, shareware, SQL queries, dbf, MS Sql server, program payments, DBF clipper Repair, web, crypt, program agreement, unix, .DBF Repair, IDE, ODBC, codebook, workflow, employee hr database, hierarchical, web ready database