FortiDB Quick Start

FortiDB (Database Security and Compliance) is a centrally-managed, enterprise-scale, database assessment and monitoring compliance solution. FortiDB is an easy-to-use product, but it is important to get acquainted with the product first. FortiDB Quick Start describes how to run Vulnerability assessments and monitor your target databases in the most efficient way.

FortiDB consists of these two major components:

FortiDB Vulnerability Assessment (VA) runs queries against a target database in order to collect configuration and setup information. It then compares query results with established industry Best Practices, provided by database vendors, industry experts, and academia. Each rule is pre-assigned a Severity level, but you can customize it. A Pass/Fail result is provided for each policy, and the policies are grouped within VA reports by Severity level, and Classification type.

Steps to use VA:

Steps	Menu
Step1: Connect to your target database	Target Management
Step2: Configure a policy	VA Policy Management
Step3: Run the assessment	Assessment Management

VA Quick Start introduces the quick steps to create a vulnerability assessment report of your target databases.

FortiDB Database Activity Monitoring (DAM) captures all types of database activity from administration events to end user activity, regardless of originating command type (plain SQL or stored procedures) or connection type (ex - standard, pooled, or console). The user activities include Select, DML, DDL, and DCL. Accuracy and completeness of audit data is assured due to the usage of selective native audit. FortiDB also provides independent audit storage, an additional security layer for audit data integrity.

Steps to use DAM:

Steps	Menu
Step1: Connect to your target database	Target Management
Step2: Configure a policy	DAM Policy Management or DB Activity Monitoring
Step3: Associate a policy to your target	DB Activity Monitoring
Step4: Start monitoring	DB Activity Monitoring

DAM Quick Start (TCP/IP Sniffer with Alert Data policy) introduces you the quick steps to monitor your target database and generate alerts and alert reports, with TCP/IP sniffer collection method.

DAM Quick Start (Data policy) introduces you the quick steps to monitor your target database and generate alerts and alert reports.

DAM Quick Start (Compliance policy) introduces the quick steps to monitor your target databases and generate the compliance report.

VA QuickStart
This guide leads you through the process that results in the creation of a vulnerability-assessment report for one of your target databases.
DAM QuickStart (TCP/IP Sniffer with Alert Data Policy)
This guide leads you through the process that monitors your target database with TCP/IP sniffer, and results in generating alerts and exporting alerts to a report.
DAM QuickStart (Data policy)
This guide leads you through the process that monitors your target database and results in generating alerts and exporting alerts to a report.
DAM QuickStart (Metadata policy)
This guide leads you through the process that monitors your target database and results in generating alerts for a Metadata policy and export an alert list from monitoring your target databases.
DAM QuickStart (PCI and SOX policies)
This guide leads you through the process that monitors your target database and results in generating compliance reports.