______________________________________________________________________________________________________

Information Systems Security ....

Network Access Monitoring

Bradford Networks offer Network Access Control  solutions which deliver the three key elements of effective network access control – identity management, endpoint compliance, and usage policy enforcement – in an integrated, appliance-based solution easily added to existing networks.

Bradford NAC solutions automatically identify authorized users and registered devices and verify device compliance before granting network access. If the user’s system is noncompliant, the system provides self-remediation options so the user can update their computer themselves, reducing impact on IT staffs and help desks.   The security policies are then continuously enforced, detailed historical audit trails recorded, and reports generated for security threat analysis and regulatory compliance.

Data Security and Compliance

Guardium's SQL Guard is a security appliance designed to protect enterprise databases. Based on proprietary SQL inspection appliance, SQL Guard offers continuous auditing, powerful reporting, and real-time alerting of SQL events between users, applications and relational databases. It is a cross-platform database security solutions supporting Oracle, DB2, Sybase and SQL Server RDBMS products.

SQL Guard monitors network, application, and database traffic and provides context-aware control over events. SQL Guard provides  total visibility on the who, what, when, where and how of data access. Standard reports allow the support of auditing requirements of Basel II, SOX, HIPAA and  GLBA and addresses security assessment, auditing, access policy control.  Detailed investigation and analysis of database activies can be traced to changes to database schemas.   The technology operates as  a stand-alone platform, non-intrusive, non-invasive, and invisible appliance with little or no  degradation in database performance, even when monitoring 100% of all SQL content for audit or anomalies.

Using the product family,  database activities can be audited and information saved in an easily downloadable format. The technology also documents and alerts on anomalous events and includes tools to do the following:

• Financial Applications Access Map - View access between financial applications database clients and servers using advanced visualization technology. This graphical map provides an at-a-glance view of activities by access type, content, and frequency.
• Compliance Report Card -  Automate the compliance assessment process using a detailed view of database access security health. Customizable tests, weights, and assessments provide the flexibility you need for continuous, real time snapshots.
• Comprehensive Audit Trail - Generate swiftly and non-intrusively a comprehensive audit trail for data usage and modifications required by regulatory compliance.
• Automated Scheduling - Streamline scheduling of workflows, audit tasks, and dissemination of information across the organization for increased accountability

End-Point Security

The Fortinet client product range provides unified security agent features for personal computers and smartphones including Personal Firewall, IPSec VPN, antivirus, antispyware, antispam and web content filtering. FortiClient's protection agent is powered by FortiGuard security subscription services to ensure devices are comprehensibly protected against today's blended threats and offers the following features:

• Antivirus & Antispyware - Provides comprehensive protection against viruses, spyware, keyloggers, trojans, adware and greyware for Windows-based laptops desktops and smartphones.
• Secure IPsec VPN - Empowers Windows based mobile laptops, desktops and smartphones with the capability to access enterprise applications securely with DES / 3DES encryption.
• Powerful Personal Firewall - Monitors network traffic and enforces the appropriate application access control on Windows based laptops, desktops, smartphones and Symbian-based smartphones.
• Advanced Antispam - Powerful antispam protection that seamlessly integrates with Microsoft Outlook for Windows based personal computers and SMS antispam for Windows and Symbian-based mobile smart phones.
• Web Content Filtering - Provides real-time web content access enforcement to ensure compliance is available for Windows-based laptops and desktops.

Compliance & Vulnerability Assessment 

Fortinet Database Security combines centrally managed, enterprise-scale, database hardening features with fast, comprehensive policy compliance and vulnerability assessment for improved data security across the enterprise.  The non-appliance based solution realizes quick time-to-value, out-of-the box reports with easy to install, intuitive, high value standards compliance policies (PCI-DSS, SOX, GLBA, HIPAA) to ensure database regulatory compliance requirements are met. Automatic database discovery quickly discovers all databases on the network, across subnet and WAN boundaries. Automation through scheduling and scripting dynamically detects database security weaknesses and non-compliance with standard policies. The solution ispre-populated with hundreds of policies that cover standard industry and governmental requirements, and security best practices. A comprehensive set of standards-based graphical reports are built into the system to produce immediate results.

Interested in further information?