SQLFirewall 1.7.1

SQLFirewall - SQLFirewall is exactly what the name implies.

What Is It?
SQLFirewall is exactly what the name implies. It is a firewall for Microsoft SQL Server currently supporting SQL 2005 and SQL 2008.
What does it do?
Can log all queries against SQL
o Includes
§ SPID
§ IP Address
§ User Name
§ Complete T-SQL Command
§ Time Called
Can block queries before they reach SQL.
§ For instance: deletes, drops, or specific key words
Can log based on user or keyword
Can alert based on multiple indicators

Advantages
Transparent to End User Applications.
No impact to the SQL Server (If run on a separate physical box)
Ability to review a connection?s or user?s queries as they were run.
Logging for compliance.
Logging for security forensics.
Doesn?t require proprietary hardware.
Very small software footprint.

Disadvantages of other existing solutions
Two existing solution types by competitors:
o Based off of SQL?s internal profiling services.
§ Impacts performance of the SQL Server engine.
§ Data capture by time and not by user.
§ Not based on Real Time Data
o Hardware based
§ Expensive
§ Cannot block commands, only read packets.
§ Only able to decrypt packet headers if signed Certificate Installed.

SQLFirewall 1.7.1 is licensed as Demo for the Windows operating system / platform. SQLFirewall is provided as a free to try download for all software users (Demo).