Imperva's SecureSphere 2.0, the most recent release of the signature and anomaly-based detection system, gets excellent marks overall for strong security with few installation requirements. With SecureSphere 2.0, users get 'an easy way to put industrial-strength protection in front of critical commerce applications.' Deployment is easy and requires about 30 minutes, including installation of the embedded database for storage of configuration and sensor-generated data. A Linux-based Snort sensor is included for passive monitoring of two-way traffic for not-uncommon Web-based attacks on database. Response actions are configured through menu selections via a Windows management and reporting console. Such actions include dropping of the connection with a TCP reset; and logging an alert and running custom scripts to extract data. The Snort sensor includes standard Web attack and many SQL/Web server signatures (including SQL UNION, DROP TABLE clauses), and users can schedule signature updates from Imperva. Sensors generally monitor access to servers in learn mode to obtain a snapshot of expected types of activity, and variations for anomaly parameters can be set. Native support is provided for Microsoft SQL Server and Oracle SQL syntax in order to enhance anomy detection. SecureSphere 2.0, which integrates with Check Point Software Technologies FireWall-1, does so by communicating through native protocols to block attacks.