Certified Product: McAfee Database Security 4.4

McAfee, Inc.
2821 Mission College Blvd.
Santa Clara, CA 95054

McAfee Database Security 4.4 (hereafter referred to as DB SEC 4.4), from McAfee, Inc.,  was the subject of a Common Criteria evaluation performed by the Common Criteria Evaluation Facility at CGI IT Security Evaluation & Test Facility. The evaluation was completed in July 2013.

The evaluation of DB SEC 4.4 determined that this Information Technology (IT) product can be trusted, to Evaluation Assurance Level (EAL) 2 augmented with ALC_FLR.2, to conform to the requirements of the associated security target.

DB SEC 4.4  is a software solution that monitors a Database Management System (DBMS) and protects it from both internal and external threats. The TOE provides full visibility into DBMS user and application activity by way of analysis of SQL statements and queries interacting with the DBMS. Analysis of DBMS transactions is determined by a monitoring policy consisting of a set of rules (predefined and/or custom) which are configured to issue alerts and/or terminate suspicious activities. The TOE can be used in support of simple, single DBMS installations as well as complex, multi-server, multi-DBMS installations.

The scope of this evaluation is defined by the security target, which identifies assumptions made during the evaluation, the intended environment for the DB SEC 4.4, the IT security requirements to be met, and the level of confidence (evaluation assurance level) to which it is asserted that the DB SEC 4.4 satisfies its IT security requirements.

Consumers are advised to carefully review the certification report to gain an understanding of the security functionality, the evaluated configuration, and the intended operating environment for DB SEC 4.4.

Security Target: PDF (1.35KB)* Accessibility Notice * Official Languages Notice

Certification Report: HTML | PDF (57KB)

Certificate of Evaluation: HTML | PDF (41KB)