SYM DB SEC & AUDIT 3100 SERIES APPL The Symantec Database Security and Audit 3100 Series appliance detects malicious database activity from both legitimate users and hackers. It provides an audit trail for database activity, alerts administrators to anomalous activity, and helps organizations easily establish, measure, and report on organizational best practices for protecting their Oracle and Microsoft SQL Server databases. The appliance learns existing database usage patterns, passively inspecting all SQL traffic in real time to detect anomalous activity based on attributes such as the time, client IP address, user, and nature of the SQL query. It also performs extrusion detection analysis on all data leaving the database to detect unauthorized access to sensitive information such as credit card and identity information.