This chapter contains:
See Also:
Oracle Database Firewall Security Guide for information about viewing the traffic log for direct database response monitoringEnabling the Database Response Monitoring feature in the Administration Console allows Oracle Database Firewall to record responses that the protected database makes to login requests, logout requests and SQL statements sent from database clients, as shown in Figure 10-1. This feature allows you to determine whether the database executed logins, logouts and statements successfully, and can provide useful information for audit and forensic purposes.
Figure 10-1 illustrates the process flow of database response monitoring.
You can view database responses by opening the traffic log in the normal way.
Database Response Monitoring records database responses for all SQL statements, logins and logouts that are logged by the policy, as configured using the Oracle Database Firewall Analyzer (see the Oracle Database Firewall Security Guide).
The information recorded in the traffic log includes the response interpreted by Oracle Database Firewall (such as "statement fail"), the detailed status information from the database, and the database response text (which may be displayed at the database client).
This section contains:
To enable database response monitoring:
Log in to the Management Server Administration Console.
Select the Monitoring tab.
Click List in the Enforcement Points menu.
Click the Settings button of the enforcement point that is being used to monitor the database.
The Monitoring Settings page appears.
Select Activate Database Response Monitoring.
If you also select Full error message annotation, any detailed response text messages generated by the database are also logged.
Click Save to save the changes.
The login and logout policies are stored in the Oracle Database Firewall and must be configured using the Oracle Database Firewall Analyzer software. See the Oracle Database Firewall Security Guide for details.