ApexSQL Mask

ApexSQL Mask

Data classification and masking

Automatically classify and mask sensitive SQL Server data

 

Overview

 

·Automate sensitive data classification

·Create and edit data classification filters

·Mask data at column and/or row level

·Choose from substitution or redaction masks

·View full database masking job summary

·Visualize database-level data masking profile

·View before-and-after masked data

·Sensitive data masking

·Create and edit sensitive data masks

·Leverage 220+ pre-defined data masks

·Import and export masks and filters

·Utilize 55+ built in data classification filters

 

Features

 

Data classification filters

Review and manage built-in and custom filters for sensitive data classification

 

Custom sensitive data classification filters

Edit and create custom filters for sensitive data classification including column name and field value searches

 

Sensitive data masking

Manage masks to obfuscate sensitive data, including both substitution and redaction masks

 

Substitution data masking

Create and edit masks to substitute data in sensitive columns including Use Original, Random, Predefined, Regular expression, Specific value

 

Row level data masking

Mask data at the individual row level for more granular substitution of data

 

Redaction masks

Create and edit masks to partially obfuscate sensitive data including sensitive titles, products or phrases

 

Mask coverage

Apply a single mask to multiple columns. Easily add and remove columns that the mask will cover

 

Masking summary

View mask processing job summary, details and warnings before a database is masked

 

Job details

View a full list of masks, to be processed, and columns that will be masked

 

Job warnings

Prior to processing a masking job, view any and all warnings

 

Post masking summary

View a summary of all job details

 

Configurable options

Customize settings at the application and project level for a variety of options

 

Visual themes

Customize the visual appearance with interface themes.

 

ApexSQL Mask FAQs

 

Data classification filters

 How many pre-existing sensitive data classification filters ship with the product?

There are 58 pre-existing sensitive data classification filters.

 

Can filters have more than one set of criteria for finding potentially sensitive columns?

Yes, it is possible to find columns by name or field value with regex or length.

 

 If so, can these criteria be configured to be AND or OR?

Yes, filters can have more than one criteria.

 

 Can I ignore certain columns so they aren't treated as sensitive?

Yes, there is possibility to check columns that will be classified or just uncheck the ones that are not considered as classified. These will be considered “ignored”.

 

 How can I tell if a column has been classified?

Classified columns have red dot icon in bottom right corner. Also, there is a column called “Classified” that will displays applied mask.

 

 Can I create and/or modify data classification filters?

Yes, you are able to create and modify your custom filters.

 

 If so, can I share my custom filters with my team via export/importing?

Yes, there are options to import and export filter list.

 

 Does column name search support wildcards?

Yes, additionally you can add more than one value for column name search.

 

 Does field value search support Regular expressions?

Yes.

 

 Can I see a summary of sensitive data classification results?

Yes, at the end of data masking process result dialog is shown.

 

 Can I create a report of sensitive data classification results?

Yes, it is possible after data masking process is completed.

 

 Can I see the particular filter that classified the column?

Yes, in the main grid after classification is finished, you have information on which filter was used to classify specific columns.

You can access all filters from the toolbar menu by clicking the Filter button in the home tab which will take you to Manage data classification filters window.

 

 Can I see all of the columns that a particular filter classified?

Yes, you can filter the main grid by using filter option in the header of the Classified column and choose to see only columns which match wanted filter.

 

 Can I manually classify a column that wasn't classified?

Yes, every column can be manually classified using check boxes next to column name in main grid.

 

 Can individually filters be enabled/disabled?

Yes, by using check/uncheck option in “Manage data classification filters” window.

 

Masks

 What is a sensitive data mask?

A data mask is functionality that creates a structurally similar but inauthentic version of an organization's data that can be used for purposes such as software testing and user training. The purpose is to protect the actual data while having a functional substitute for occasions when the real data is not required.

 

 What types of masks are there?

There are substitution and redaction mask types.

 

 What is a substitution mask?

Substitution is mask type that uses generators to replace data entirely.

 

 What is a redaction mask?

Redaction is mask type that uses specific value or part of it and replace it with custom value.

 

 What types of substitution masks are there?

Currently there are five substitution masks types: Use original, Random, Predefined, Regular expression and Specific value.

 

 Can data be masked at the individual row level?

Yes, specific row can be masked with substitution mask type when row level is chosen or using reduction mask.

 

 Can I share masks I've created with my team by export/importing?

Yes, under manage mask window there are import and export buttons that can be used for sharing masks.

 

 Can I see all the columns that a particular mask has been assigned to?

Yes.

 

 Can I assign a mask to more than one column?

Yes.

 

 Can I process a column with more than one mask?

No, since column can only have one mask it is not possible to process a column with more than one mask.

 

 Can I preview column data before and after masking?

Yes, just by selecting the column from the list this preview is immediately displayed as main windows’ side bar displaying before/after values.

 

Data generators

 What is data generator?

Generator is built-in functionality used for generating synthetic but real-world data in columns e.g. City names. ApexSQL Mask offers over 200 pre-defined generators including things like first and last names, street addresses, city and country names and special lists likes auto-manufacturers, movie titles etc.

 

 How do generators relate to masks?

Masks can use generators to replace original data with new realistic data.

 

 How many built in generators?

There are over 200 built in generators.

 

 Can I create/modify my own generators/sub-generators?

No, you cannot create generators but you can modify certain type of generators like Regular expression, Specific value, Predefined and Use original. Random generator cannot be modified.

 

Auto-assignment of masks

 

 How does the app. automatically apply filters to some columns?

The application is using keywords from filters and scans through all column names.

 

 Can auto-assignment of masks behavior be modified e.g. turned on/off or otherwise customized?

Yes, this can be turned off in general options by unchecking “Automatically scan the database for sensitive data”.

 

 Can generators be associated with a Data classification filter to automatically apply masks to columns it positively classifies?

Yes.

 

Processing

 Does ApexSQL Mask modify an existing database and/or create a modification script that I can run later?

Both options are available.

 

 Can I automate the process of data masking?

Yes, ApexSQL Mask supports CLI both batch and PowerShell.

 

 Can I add a mask to a column that hasn't been classified?

Yes, user has ability to manually set columns to be classified.

 

Can I see a summary of the results from processing masks?

Yes, after masking process is completed the result dialog appears and user is able to see the summary, create report and export results.

 

Options

 Does ApexSQL Mask recognize CHECK constraints?

Yes, ApexSQL Mask recognize CHECK constraints and can pre-emptively disable them.

 

System requirements

ApexSQL Mask
Hardware	Dual Core 2.0 GHz CPU 3 GB memory 118 MB disk space
SQL Server	SQL Server 2005 and higher [1] Azure SQL Database [1] Amazon RDS for SQL Server [1]
OS	Windows 7 SP1/Windows Server 2008 R2 SP1 and higher [1]
Software	.NET Framework 4.7.2 or higher
Permissions and additional requirements	Windows user account with administrative privileges

[1] See Supported systems for exact version support