F5 Networks, Inc., a Gold-level member of the Oracle PartnerNetwork, has announced integration between the F5 BIG-IP Application Security Manager (ASM) product and the Oracle Database Firewall. Building on F5's ability to help simplify database administration and accelerate database replication for Oracle customers, the integration provides improved SQL injection protection for F5 customers and correlated reporting for richer forensic information on SQL injection attacks for Oracle customers, according to F5.
"F5 provides a suite of customizable technologies to support Oracle Database deployments," states Andy Bailey, senior vice president, Alliances & Channels at Oracle. "The integration of F5's BIG-IP Application Security Manager to the Oracle Database Firewall further shows how partners can differentiate their offerings by providing customers with value-added solutions based on Oracle products."
Oracle Database Firewall, part of Oracle's portfolio of database security solutions, monitors database traffic from applications to detect and block SQL injection, privilege or role escalation, and other external and internal attacks. It uses an innovative SQL grammar analysis approach that provides accuracy and scalability. Using pre-defined policies, the Oracle Database Firewall will take the appropriate action, helping to eliminate time consuming and costly false positives. When the BIG-IP ASM detects a SQL injection attack, it notifies the Oracle Database Firewall of the threat.
According to F5, leveraging its iRules capabilities, BIG-IP ASM sends information about web application user identity and session such as IP address and time to the Oracle Database Firewall, When the Oracle Database Firewall is notified of a SQL injection attack by the BIG-IP ASM, it logs that event using the additional information about the identity of the user and their origin, and correlates it with its own policy enforcement, enabling IT teams to better identify trends and react more quickly to an attack.
This F5 component of the solution is included with BIG-IP Application Security Manager at no additional fee. Customers can contact their Oracle representative for pricing on Oracle Database Firewall. For more information on Oracle Database Firewall, go here.
For more information, go here.