Encrypted database?

Thanks for the responses!

 

The problem that lies with the sensitive parameters option is that it requires that you know the parameter that uses that information. That's all and good if your company has a firm grip on how those parameters are defined. Unfortunately our company at this time doesn't not dictate what parameters names the application programmers can use, thus making it impossible for us (the network folks) to ever be 100% sure all values are getting caught. I was hoping there might be a more global way to filter, but I haven't found it yet. We may have to export the database and scan it somehow.