Changes In This Document

This section lists the updates and correction to the document in Oracle Audit Vault and Database Firewall (AVDF) release 12.2.

Revision History

The following are the updates and correction in this document.

E49586-20 (March 2020)

Introduced a new alert condition POLICY_NAME that is used while Writing an Alert Condition.

E49586-19 (October 2019)

• Update to the Database Firewall masking policy. See section Masking Data for complete information.

• Updates and correction to the entire document.

E49586-17 (June 2019)

Minor correction to the procedure in Editing a Database Firewall Policy.

E49586-16 (March 2019)

Included support for Oracle Linux (versions 6.9; 6.10; 7.4; and 7.5) operating system as secured targets for audit collection. Also included support for Red Hat Enterprise Linux operating system (versions 7.4 and 7.5) as secured target for audit collection. Included new audit events in Linux Operating System Audit Events.

Included support for Microsoft SQL Server 2017 for audit collection. Included new events in the following sections:

• User Session Events

• Possible Target Types Values Associated With Certain SQL Trace Audit Events

• System Management Events

• Data Access Events

• Service and Application Utilization Events

E49586-15 (December 2018)

Minor correction to section Creating Non-Interactive Report Templates.

E49586-14 (October 2018)

• Minor update to sections Importing Sensitive Data Into Repository and Accessing Data Privacy Reports.

• Added an important note on scheduling concurrent long running reports at the same time. See section Creating a Report Schedule for complete information.

• Added a note on filtering reports in section Activity Overview Report.

E49586-13 (June 2018)

• Added Data Privacy Reports to help comply with privacy regulations such as GDPR. See Data Privacy Reports for complete information.

• Added an important note on privileges required to create, modify, and delete email templates or distribution lists in case Oracle Audit Vault and Database Firewall is upgraded to release 12.2.0.8.0 and later. See sections Creating or Modifying an Email Distribution List and Creating or Modifying an Email Template for complete information.

• Added an important limitation in section Data Modification Before-After Values Report.

• Added an important note on assigning roles to the source user for running the REDO collector with Database Vault. See section Data Modification Before-After Values Report for more information.

• Minor update to section Creating Exceptions.

• You can create, modify, and generate using existing PDF or XLS report templates. See Creating Non-Interactive Report Templates for complete information.

E49586-12 (February 2018)

F5 is deprecated in release 12.2.0.7.0, and will be desupported in 19.1.0.0.0.

E49586-11 (December 2017)

• Included support for AIX 7.2 as secured target for audit collection. Introduced a new AIX Audit Event LVM_KDeleteVG. Modified the following audit events. See AIX Audit Events for complete information.

  • FILE_Unlink

  • FILE_Dupfd

  • DEV_Remove

• Included support for the following new versions of MySQL with both old and new audit formats. Included 150 new audit events and modified the existing ones. See MySQL Audit Events for complete information.

  • 5.5.34 to 5.5.57

  • 5.6.13 to 5.6.37

  • 5.7.0 to 5.7.19

• Included support for Microsoft Windows Server (x86-64) 2016 version. Added 15 new Windows Audit Events and modified existing ones. See Microsoft Windows Operating System Audit Events for complete information.

• Included support for Active Directory 2016. Added new Directory Service Audit Trail Events in section Directory Service Audit Trail Events. Also included one new event MODIFY_OBJECT in section Security Audit Trail Events.

E49586-09 (August 2017)

• Included two new events ACCT_LOCK and ACCT_UNLOCK. See Linux Operating System Audit Events for the complete list.

• Included a new possible target type PERMISSION in List 3: Possible Target Type Values for IBM DB2 Audit Events.

• The Data Modification Before-After Values Report displays both before and after values. See Data Modification Before-After Values Report for complete information.

  • Filter on Column Name can be added in before and after values report.

  • Information Lifecycle Management is extended for before and after values data.

• Included new column DATA_TRACE in Data for Event Reports.

• Included information on the rules evaluation process. See sections Understanding a Database Firewall Policy's Overview Page and About Defining the Policy.

E49586-08 (June 2017)

• Included Oracle Database AIX Audit Events. See AIX Audit Events for complete information.

• Correction to the procedure in section Creating a Report Schedule.

• Audit Vault and Database Firewall system supports data warehousing and partition functionality. See section Data Warehouse Partition for more information.

• Updated information on Audit Type in the section Defining Fine-Grained Audit Settings.

• Correction to the section Defining Session Filters to Use in Profiles and Exceptions.

• PRIVILEGED USER REPORT now displays users with DBA role. See section Privileged Users Reports.

E49586-07 (December 2016)

• Introduced new source events in Linux Operating System Audit Events.

• Updated the list of Possible Target Types and Class Types in the section Possible Target Types Values Associated With SQL Audit and Event Log Events.