Imperva and Vormetric provide database security through a combination of database activity monitoring and encryption capabilities. This solution monitors and controls access for both privileged and non-privileged users inside and outside the database, while also encrypting sensitive data. It enables comprehensive protection of databases across physical, virtual, and cloud environments to meet regulatory compliance requirements. The joint solution from Imperva and Vormetric delivers layered database security through transparency, manageability, and rapid deployment.

1. Integration Benefits
» Robust Security: Ensures
privileged users inside and outside
of the database do not have access
to sensitive data
» Transparent: Requires no changes
to applications, databases, or
storage environments. Has a near
zero performance impact and does
not disrupt business operations.
» Manageable: Minimizes costs and
maximizes ROI by protecting and
auditing heterogeneous database
environments
» Quick: Deploys rapidly, without
disturbing existing environments
Imperva and Vormetric
Database Activity Monitoring and Encryption provide a
layered defense to protect databases
Real-time database activity monitoring and encryption are essential ingredients for
preventing data theft, maintaining data integrity, and meeting privacy and security
mandates required by customers, regulators, and lawmakers. Imperva and Vormetric have
teamed together to deliver a solution that encrypts sensitive data and continuously audits
and monitors database and database file access by privileged and non-privileged users.
Deploy Robust, Layered Defenses
Imperva and Vormetric enable a comprehensive solution that helps organizations protect
databases through a combination of database activity monitoring and encryption
capabilities. Imperva SecureSphere provides full auditing and visibility into database usage
across heterogeneous database platforms, while Vormetric Encryption secures and controls
access to database information from users who work at the operating system and storage
tiers. With this combination, organizations can monitor and control users both inside and
outside of the database.
Meet Regulatory Compliance
Enterprises often struggle to attain compliance with industry regulations such as PCI
DSS, SOX, HIPAA/HITECH, and with national or regional data privacy laws such as the EU
Data Protection laws. These regulations, mandates, and privacy directives require activity
audit and security controls to protect databases in scope. Imperva SecureSphere and
Vormetric Encryption help meet these requirements with data discovery and classification,
vulnerability assessments, encryption, database auditing and security, privileged user
monitoring, and access rights analysis capabilities.
Protect the Cloud and Virtual Environments
The popularity of virtualized environments and private clouds pose new challenges for
securing data. Some of these challenges include mixed trust levels, the potential for
weakened separation of duties enforcement, and data governance. Enterprises who want
to leverage these environments need the assurance that they can meet compliance
requirements and minimize the risk of a data breach. To identify, prioritize, and mitigate
risks across a varied infrastructure, organizations require a layer of security positioned close
to the data. Imperva SecureSphere and Vormetric Encryption can be deployed to protect
heterogeneous data centers across physical, virtual, and cloud environments.
TechnologyAlliance
PARTNERSPHERE

2. Together, Imperva and Vormetric deliver a comprehensive security solution that meets compliance requirements, prevents data theft,
strengthens data privacy, and minimizes the cost of securing heterogeneous enterprise data centers in on-premise, virtual and cloud
environments.
Drivers for Database Security
» Compliance – PCI DSS, HIPAA/HITECH, State Data Breach
Laws, National Data Protection Laws
» Security mandates
» Contractual obligations
Typical Database Threats
» Unauthorized Database Access
• Accessing data that is off-limits
• Attempts to exploit a vulnerability
» Unusual Database Access
• High velocity & high volume queries
• Atypical table access; from different locations, IP’s,
applications, etc.
» Unauthorized System Access
• Database files; backups, log files, ETL data, etc.
• Unauthorized Insiders
• Unauthorized Outsiders (hackers)
About Vormetric
Vormetric Encryption provides data protection, access control, and transparent encryption of structured (database) and unstructured data
in physical, virtual and cloud environments. Vormetric Encryption provides integrated encryption key management while Vormetric Key
Management manages keys for internal database Transparent Data Encryption. Vormetric secures against external threats (hackers with user
credentials) and manages data access for internal users (IT admins, etc).
About Imperva
Imperva is a pioneer and leader of a new category of business security solution that protects critical applications and data from theft, insider
abuse, and fraud; and also streamlines regulatory compliance. We provide a comprehensive solution for monitoring and controlling all data
usage and business transactions across the data center, from storage in a database or on a file server to consumption through applications.
For more information, please visit www.imperva.com and www.vormetric.com.
TechnologyAlliance T
© Copyright 2012, Imperva
All rights reserved. Imperva, SecureSphere, and“Protecting the Data That Drives Business”are registered trademarks of Imperva.
All other brand or product names are trademarks or registered trademarks of their respective holders. #TAB-IMPERVA-VORMETRIC-1212rev1
Imperva and Vormetric protect databases through a unique combination of
database monitoring and encryption applied to all tiers of the database stack.
Network
Security
Layers of
Defense
Data
Security
Layers of
Defense
Application Tier
Data Tier
Server Tier
StorageTier
Applications
Internet
Database
Operating System
Data
Firewall
IDS/IPS
Content Filtering
DLP
IAM