RE: What tools do you use to comply with Sarbanes-Oxley?



I am using Idera's SQL compliance manager for all of my SQL auditing
requirements. I have had very few problems with the tool and any issues I
have had were remedied very quuickly by the Idera capable support staff. I
currently manage 130 SQL servers with the tool and generate reports each
Monday utilizing MS Reporting Services. I have 2 basic type of reports: 1. We
are required to report all failed login from all SQL servers to our Security
Team. 2. On those databases considered critical, I send activity reports to
all IT custodians managing those databases every week. This is all automated.
I have seen no issues with scaling. I have the product spread over one
account domain (about 110 SQL servers) and 2 other non-trusted domains (about
20 SQL servers), all managed from a central console. My experience in dealing
with Idera has also been positive. I have had functionallity suggestions in
the past and Idera is very receptive to customer feedback. Several of my
suggestions have been implemented into the product. The product is also very
easy to set up and use.


"Kenny" wrote:

Does anyone use tools from www.lumigent.com, www.guardium.com,
http://www.idera.com/Products/SQLcm/ for this?



Others I've looked at a little are www.tizor.com, www.rippletech.com,
www.iplocks.com, www.consul.com and www.gridapp.com.



The best one depends on if you are looking for a network appliance like
guardium or an agent approach like lumigent and idera.



Here is another post that list some solutions:
http://forums.microsoft.com/MSDN/ShowPost.aspx?PostID=1894402&SiteID=1



Audit Tools
ApexSQL Audit http://www.apexsql.com/sql_tools_audit.asp
AuditDatabase (Free Web based trigger generation)
http://www.auditdatabase.com/
Lumigent Audit DB http://www.lumigent.com/products/auditdb.html
OmniAudit http://www.krell-software.com/omniaudit/index.asp
SQLLog
http://www.rlpsoftware.com/mainframe.asp?contents=SQLLog.asp&mainmenu=SQLLog&submenu=Info
Upscene SQL Log Manager
http://www.upscene.com/index.htm?./products/audit/mssqllm_main.htm
DB Audit Expert http://www.softtreetech.com/dbaudit/


.



Relevant Pages

  • A little OT - Quite a rant on microsoft.public.sqlserver.olap
    ... SQL authentication doesn't work for SQL Server to anywhere. ... reports in ADP; but somehow it's not getting traction. ... thru in order to create forms and reports against a database. ...
    (microsoft.public.access.modulesdaovba)
  • Re: why>?
    ... MDB are a useful learning tool ... I used them for several years before moving to SQL. ... We've got the most exciting pivotTables anywhere. ... it's each to share reports with others; copy reports; duplicate ...
    (microsoft.public.excel)
  • Re: Faircom c-Tree Server vs. Relational DBMS
    ... Our products were very reliable in terms of how the database ... SQL was used for building and upgrading the ... to process reports that take several hours to run. ... what database tools to use) that are dictated by management ...
    (comp.databases)
  • Re: View or Not Views
    ... SQL Server use the tempdb database to store temporary results and do the required calculations, but its a per-session "table", and you can't access or use these result directly. ... If you really want to access the database in your reports and you always access aggregated data, then create pre-aggregated tables to store the result and use these tables instead of you 500Gb table. ...
    (microsoft.public.sqlserver.olap)
  • Re: Using an MS Access Project with an OLE DB Data Source
    ... As far as SQL ... they can create their own queries and reports. ... you can link to both Oracle and SQL Server databases in the same mdb ...
    (microsoft.public.access.externaldata)