Try our new research platform with insights from 80,000+ expert users

ACF2 vs IDERA SQL Compliance Manager comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Apr 6, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

ACF2
Ranking in Database Security
16th
Average Rating
9.0
Reviews Sentiment
7.8
Number of Reviews
6
Ranking in other categories
Mainframe Security (6th)
IDERA SQL Compliance Manager
Ranking in Database Security
12th
Average Rating
7.8
Reviews Sentiment
6.2
Number of Reviews
5
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of May 2025, in the Database Security category, the mindshare of ACF2 is 0.8%, up from 0.6% compared to the previous year. The mindshare of IDERA SQL Compliance Manager is 0.8%, down from 1.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Database Security
 

Featured Reviews

reviewer1077621 - PeerSpot reviewer
A reliable, scalable product for security and auditing of our mainframe environment
It is a good product. It has been used for years. As long as it is configured correctly, it is a very stable product. It depends on how an institution or a company configures it. It depends on an institution's risk appetite. You need to make sure it is configured as per the concept of least privilege, and the logging features, detection and control mechanism, and other things like that are enabled. If you configure it to give access to the public, then there could be compromises. You should also have someone who independently checks it to make sure that it is configured keeping security in mind. If it has been configured for a while, when there are enhancements to the product or when you enhance it, you need to make sure that security is also looked at, and it is configured according to an institution's security policies. I would rate it a nine out of 10.
Database5b8b - PeerSpot reviewer
Enables us to track changes to databases and tables, but the dashboard doesn't always work as expected
What would really be nice is if it were a bit more flexible, in several ways. The assistant for creating rules is nice, as it looks like Microsoft Outlook, but it's not flexible enough. What would really a good thing is if you could refer to an external list or table for filtering on, say, certain applications, IP addresses, or host names; or perhaps even combinations of host name and application name. Because in our environment, we're suffering from the fact that we have a huge amount of login events. A really huge amount of login events. We have gigabytes of login and logout from the same application; sometimes, several thousand times within one second. These are very badly coded applications for sure, but we have a lot of that. We didn't code them ourselves. It's bought software. We need filter rules for certain combinations as I mentioned above. These rules have to be maintained and have to be audited by the people that take care of the applications that cause the login events. It's difficult for us because we don't want to give them access to Compliance Manager. What would very much easier for us is to give them some kind of self-service to take care of a list of a combination of host, account, and application name, because only they know whether this combination is valid or not. They know how their application service is named and what services they're using. They have to maintain this list. It would be much easier if there was a table that we would maintain, or they would maintain via self-service, and we could use this table to establish these filter rules. At the moment, we have to check all the rules after this table is maintained by our colleagues who maintain or run the applications. After that, I wrote a stored procedure that creates, depending on the table, new rules in Compliance Manager, but that's a workaround. It's not a really nice solution, so it would be much better if Compliance Manager would have functionality like that built in. That's one thing. Another nice feature would be concerning GDPR: some kind of base-lining of database access or some kind of inventory for tables or certain columns or types of columns. IDERA already has several other tools, free tools, to search for certain criteria of columns holding things like credit card numbers, for example. It would be nice if that would be a feature within Compliance Manager, as it's very a very similar thing, it goes hand in hand.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The NOACCESS by default is another very good feature. Also, access rules are straightforward, and easy to understand."
"We use this tool to quickly assign privileges to different users as soon as they come in."
"Excellent real-time reporting that saves time and resources."
"Logging and monitoring are most valuable. It is for the mainframe environment, and it is at the forefront for security and resilience."
"I love their support. The support is great. They are number one."
"The tool can track logins and login failures. I made my own alert so that if there is a certain number of login failures for a server, it emails me. That is really useful. If I want logins to automatically lock out after a certain number of failed attempts, I can know when that happens."
"The ability to track activity including the SQL statements is definitely valuable. I really like how the database is laid out. It's straightforward. I can query the back-end tables. I've made a few of my own email alerts based on the data and the tables. It's accessible."
"The initial setup was straightforward."
 

Cons

"They can work on its ability to work in a distributed environment. It's a mainframe product. As many companies move to the cloud, depending on what cloud models they choose, such as a public, hybrid, or private cloud, it should be deployable. I am not sure if it can be deployed on those platforms. It has been there since the '50s or '60s, and it's still scalable. It has survived all these years, and it's scalable to many platforms, but I don't know about the cloud."
"It needs longer rules. The max rule is 32K."
"I would like my team and me to be able to use simple browsers, like Chrome, to be able to access mainframe data and provision users using the browser.​"
"Reporting can sometimes include false positives."
"What would really a good thing is if you could refer to an external list or table for filtering on, say, certain applications, IP addresses, or host names; or perhaps even combinations of host name and application name."
"The set up is kind of clunky, in my opinion. It's not really intuitive. If they had either a smoother install or better instructions, that would be nice."
"I submitted a ticket (last year) about archiving/grooming of old records because the GUI functionality was not working. Per their recommendation, I ended up using a command line to do it."
"Its filtration and navigation are not the best."
"There is an agent that collects the data on SQL Server. Sometimes it will stop collecting. I'm not exactly sure what's happening but I have to go in and manually restart the agent. It would be nice if the central collection server could send a request to the agent to restart."
 

Pricing and Cost Advice

Information not available
"I feel the product's pricing is a good value."
"The pricing is pretty good."
"It's a good price value... The other tools weren't cheaper."
"The product is cheaper than other products I checked but it is still a good idea to check again and compare."
report
Use our free recommendation engine to learn which Database Security solutions are best for your needs.
850,236 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
33%
Computer Software Company
8%
Insurance Company
8%
Retailer
8%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What is a good length for a password in ACF2 so it's safe?
A set length of 12 characters can ensure the safety of a system. Longer passwords provide an added layer of security, especially when combined with other password complexity requirements. With a le...
Is ACF2 suitable for beginners?
ACF2 can be suitable for beginners with the right guidance and support. While it may have a steep learning curve for many due to its complexity, it offers extensive documentation and resources that...
What types of auditing and reporting capabilities does ACF2 offer?
ACF2's reporting capabilities are highly valuable. It offers various predefined reports that provide insights into our system's security posture. These reports include information on user access pr...
Ask a question
Earn 20 points
 

Comparisons

No data available
 

Also Known As

CA ACF2
IDERA SQL CM
 

Overview

 

Sample Customers

Sky, Rogers Communications
Hanger; AmerisourceBergen; CMS Energy; Manulife Financial; Patterson Companies; Pfizer; Rockwell Automation; TrialCard; Unum; Verizon Communications; Skygen USA; Calpine Energy Solutions; Standard Chartered PLC; TrialCard, Inc.; Raffles Hospital; Houston Methodist; Community America Credit Union; Noble Americas Energy Solutions LLC; QuikTrip Corporation; HUK COBURG; OneBeacon Insurance Group, Ltd.
Find out what your peers are saying about ACF2 vs. IDERA SQL Compliance Manager and other solutions. Updated: April 2025.
850,236 professionals have used our research since 2012.