The image sigad_vm_010.png describes the Oracle AVDF architecture.

The middle of the image shows a Database Firewall at the top, with an arrow pointing to an Audit Vault Server at the bottom. The arrow is labeled "Firewall Events."

At the top, two icons are shown to the left of the Database Firewall, representing users and applications. Several arrows point from the users and applications to the Database Firewall. Some arrows are green, others are red. To the right of the Database Firewall is a list of firewall actions: Allow, Log, Alert, Substitute, Block.

Green and yellow arrows point from this list of firewall actions to three database icons. These contain a smaller icon representing the Audit Vault Agent. Next to these database icons there is a text box labeled "Databases," which lists Oracle, MySQL, Sybase, IBM, and Mircrosoft. An arrow, labeled "Audit Data" points from the databases to the Audit Vault Server.

On the lower right of the image there is a text box labeled Operating Systems, which lists Oracle Solaris, Windows Server, and Linux. An arrow points from this text box to the Audit Vault Server. This arrow is labeled OS, Directory Services, File System and Custom Audit Logs.

At the bottom, to the left of the Audit Vault server, two users are depicted: Auditor and Security Manager. Between these users and the Audit Vault Server are icons representing Reports, Alerts, and Policies.