Firewalls - IAC - DTIC

GreenSQL Express, Light, Pro, and
Database Firewall
Abstract
GreenSQL offers a range of commercial database
application level gateway/firewall products, including
GreenSQL Pro, GreenSQL Light, and GreenSQL Express.
GreenSQL commercial firewalls can protect Microsoft
SQL Server, MySQL, or PostgreSQL databases and
Document Management Systems. GreenSQL Pro
includes database firewalling, auditing, caching,
intrusion detection/prevention, monitoring, and
logging and reporting solutions to protect databases
and database-based document management systems
from internal and external threats in real time. It
enforces both positive and negative security policies,
and rejects intrusion attempts for queries known or
suspected to be unauthorized. The firewall’s automated
learning mode can automatically generate a full set of
policy rules based on the specific behavior of the
database to be protected. GreenSQL Light provides the
same protections to single databases. GreenSQL
Express is a limited free version of GreenSQL that
includes a rules-based database firewall and IDS/IPS
that implements a single proxy. In addition to its
commercial offerings, GreenSQL offers an open source
GreenSQL Database Firewall—an implementation of
the GreenSQL database proxy firewall designed for
protecting MySQL and PostgreSQL databases against
SQL injection attacks. The logic is based on evaluation of
SQL commands using a risk scoring matrix as well as
blocking known database administrator commands
(“drop”, “create”, etc).
GreenSQL Database Firewall
Type of Firewall aF (database)
oS Express, Light, Pro: windows Server 2008,
windows Server 2003, Linux (Ubuntu,
CentoS, debian); database Firewall: Linux
(debian, Ubuntu, red Hat, Fedora, CentoS,
SuSE, Mandriva), FreeBSd
Format Software
License Express, Light, Pro: Commercial;
database Firewall: open source
NIaP Validated
Common Criteria
Section 3 Firewall Products – application Firewalls
developer GreenSQL, Ltd. (Israel)
Information http://www.greensql.com
http://www.greensql.net
Firewalls IA Tools Report – Seventh Edition
59