Guardium - Guardium Achieves ArcSight Certification

Guardium Achieves Certification Under ArcSight EnterpriseView Partner Program

Integration with the ArcSight SIEM Platform Provides Enterprises with Clear Visibility into Internal and External Database Threats

ArcSight Protect ’08, WASHINGTON, DC – September 8, 2008 ─ Guardium, the database security company, and ArcSight, Inc. (NASDAQ: ARST), a leading global provider of compliance and security management solutions, today announced that Guardium has been certified for integration under the ArcSight EnterpriseView Partner Program, delivering the next generation of business risk monitoring solutions.

Guardium’s built-in support for CEF (Common Event Format) enables customers to seamlessly integrate with the award-winning ArcSight SIEM Platform to provide a business-level dashboard view of who is accessing their critical enterprise data and how that data is being used. The combination of Guardium and ArcSight technology allows enterprises to better understand their users, data and applications at a deep level to minimize risk, promote proper governance and reduce compliance costs.

Sharing Information About Compliance Violations, Insider Threats and Security Policy Violations
Guardium provides real-time visibility, understanding and control of activity at the data layer, across all major DBMS platforms and enterprise applications. With Guardium’s integrated support for CEF, customers can now easily link their Guardium and ArcSight systems via both real-time data flows and periodic uploads. For example, they can share information from Guardium systems about:

Compliance policy violations, such as unauthorized changes to critical database tables and data values. This is particularly important for compliance with Sarbanes Oxley (SOX) and other governance mandates.
Insider threats from privileged users, such as administrators viewing or downloading sensitive data. Guardium can also “crawl” through corporate databases and file servers, looking for previously-unknown locations of sensitive data. These capabilities are essential for compliance with the Payment Card Industry Data Security Standard (PCI-DSS) and other data privacy regulations.
Security policy violations such as outsourced DBAs creating new accounts or modifying entitlements. Unique in the industry, Guardium provides an advanced preventive control, called S-GATE™, that preemptively blocks privileged users from performing unauthorized actions—without the risk of blocking legitimate business access, and without relying on “after-the-fact” detective controls such as traditional logs.
Potential fraud by end-users of enterprise applications such as SAP, Oracle e-Business Suite, PeopleSoft, Siebel, JD Edwards, and Business Intelligence as well as other Service Oriented Architecture (SOA) applications developed for BEA WebLogic, IBM WebSphere and other middleware platforms.
Cybersecurity threats such as SQL Injection attacks, multiple login failures and attempts to exploit vulnerabilities in unpatched systems.

Guardium’s latest series of innovations, Guardium 7, along with its CEF integration, will be demonstrated at the ArcSight Protect ’08 User Conference in Alexandria, VA, September 7-10, 2008. Guardium is also a founding member of the ArcSight EnterpriseView partner program.

“Guardium’s EnterpriseView partnership and certified support for CEF makes it easier for enterprises to oversee their sensitive information,” said Jeff Scheel, senior vice president of business development, ArcSight. “ArcSight customers now can easily correlate Guardium’s analysis at the database layer with activity across more than 275 devices and applications including network routers, identity and access management systems and physical security devices to provide a higher level of security and policy control.”

Forrester Research recently named Guardium “a Leader across the board,” with “dominance and momentum on its side.” In this comprehensive assessment, Forrester evaluated 14 large and small vendors across 116 criteria, with Guardium earning the highest overall scores for Architecture, Current Offering and Corporate Strategy (“The Forrester Wave: Enterprise Database Auditing And Real-Time Protection, Q4 2007” by Noel Yuhanna, October 2007).

“Enterprises are realizing that securing their core data assets in the database is an essential component of their security strategy and must be integrated into their existing security event and information management systems,” said Upesh Patel, vice-president of business development, Guardium. “Working with ArcSight to ensure that Guardium is seamlessly integrated & certified with the ArcSight SIEM platform provides customers the assurance that these systems are proven to work together to effectively share critical security information.”

About Guardium
Guardium, the database security company, delivers the most widely-used solution for ensuring the integrity of enterprise data and preventing information leaks from the data center.

The company’s enterprise security platform is now installed in more than 350 data centers worldwide, including more than 60 Global 500 and Fortune 1000 companies in all major industries. Customers include 3 of the top 4 global banks; 2 of the top 3 global retailers; one of the world’s largest PC manufacturers; a global soft drink brand; and a leading supplier of business intelligence software. The company has partnerships with Oracle, Microsoft, IBM, Sybase, BMC, EMC, RSA, Accenture, NetApp, McAfee, ArcSight and NEON, with Cisco as a strategic investor, and is a member of IBM’s prestigious Data Governance Council and the PCI Security Standards Council.

Founded in 2002, Guardium was the first company to address the core data security gap by delivering a scalable enterprise platform that both protects databases in real-time and automates the entire compliance auditing process.

Guardium is a trademark of Guardium, Inc.

Media Contacts:
Corinne Federici and George Robertson
Corporate Ink
617.969.9192