Topics
Secured targets are created by an Oracle Audit Vault and Database Firewall administrator. A secured target is created for each database or other supported audit source for which you want to retrieve audit data, and/or for a database you want to monitor with a Database Firewall.
As an auditor, you can view data for secured targets to which a super auditor has granted you access.
You can use the Secured Targets tab of the Audit Vault Server console to control the following aspects of the secured targets that you can access:
View and sort the list of secured targets.
See Also:
View, change, or access the following for each secured target:
Audit trails
Enforcement points
Firewall policy
Audit policy (for Oracle databases only)
User entitlements (for Oracle databases only)
Stored Procedure Auditing (SPA)
Retention policy
Create or modify secured target groups
Manage entitlement snapshots and labels
Topics
You can view audit policy settings for Oracle databases from the Secured Targets tab.
To view audit settings for Oracle databases from the secured target page:
See Also:
When you retrieve user entitlement data for an Oracle Database secured target, a snapshot of the data at this point in time is added to the entitlement snapshots retrieved at earlier points in time. From there, you can organize snapshots by assigning them labels, and compare entitlement data from different snapshots or labels.
You can start entitlement data retrieval immediately or set up a schedule for retrieval.
To retrieve entitlement data for a secured target:
Log into the Audit Vault Server console as an auditor.
Click the Secured Targets tab.
Select a secured target from the list.
Expand the User Entitlements section in this secured target.
The timestamp of when entitlement data was last retrieved, if any, appears.
To start the retrieval job immediately, click Retrieve User Entitlement Data.
A confirmation message appears. If necessary, re-expand the User Entitlements section.
Next to Scheduled Retrieval, click the Enable radio button.
In the First Run Time field, use the calendar icon to select a date and time.
Next to Repeat Every, select the frequency of retrieving the data.
Click Save.
You can check the status of entitlement retrieval by clicking Jobs in the Quick Links menu on the left.
You can audit changes to stored procedures in a secured target in Oracle Audit Vault and Database Firewall reports. In order to see this data for a database secured target, you must activate Stored Procedure Auditing for that secured target.
To activate stored procedure auditing for a secured target:
Log in to the Audit Vault Server console as an auditor.
Click the Secured Targets tab, and then click the name of the secured target you want.
Scroll down and expand the Stored Procedure Auditing section.
Select Activate Stored Procedure Auditing.
Set the following fields:
First Run Time: Select the date and time to run stored procedure auditing for this database for the first time.
Repeat Every: Select how often to repeat stored procedure auditing for this database.
Click Save.
See Also:
Oracle Audit Vault and Database Firewall Administrator's Guide for information to collect stored procedure changes from a secured target database. Oracle Audit Vault and Database Firewall administrator must run scripts to set up the correct user privileges on that database.
An Oracle Audit Vault and Database Firewall administrator starts and stops audit trails. As an auditor, you can view lists of audit trails for secured targets you have access to. You can see the trails collected for a single secured target or for all your secured targets:
To view audit trails for a secured target:
If a secured target is a database monitored by a Database Firewall, you can upload or change the firewall policy assigned to the secured target.
To set or change the firewall policy for a database secured target:
See Also:
Creating Database Firewall Policies for detailed information on firewall policies.
An Oracle Audit Vault and Database Firewall administrator creates enforcement points for database secured targets monitored by a database firewall. As an auditor, you can see the enforcement points configured for the database secured targets you have access to. You can see the enforcement points for one secured target or for all your secured targets:
To list the enforcement points for a database secured target:
The data retention policy for a secured target determines how long audit data is retained for that target. An Oracle Audit Vault and Database Firewall administrator creates retention policies, and an auditor selects one of the available policies to assign to a secured target.
If you do not select a retention policy for a secured target, the default retention policy will be used (12 months retention online and 12 months in archives before purging).
Do not set the retention policy after data collection has started from the secured target.
A new retention policy takes effect as of the date you select the policy, but does not apply to existing data.
See Also:
Oracle Audit Vault and Database Firewall Administrator's Guide for information on configuring retention (archiving) policies.
As a super auditor you can organize secured targets into groups for the purpose of granting auditor access to them as a group instead of individually.
Oracle AVDF provides a set of preconfigured user groups related to compliance categories, for example HIPAA or DPA. You can add secured targets to those groups to generate the specific compliance reports related to those databases.
As a super auditor you can create secured target groups in order to grant other administrators access to secured targets as a group rather than individually.
To create a secured target group:
Log in to the Audit Vault Server console as an auditor.
Click the Secured Targets tab.
From the Manage menu on the left, click Groups.
Preconfigured groups are listed in the bottom pane, and user-defined groups are listed in the top pane.
You can adjust the appearance of the list in the bottom pane from the Actions menu.
Click Create, and enter a name and optional description for the group.
To add secured targets to the group, select the secured targets, and click Add Members.
Click Save.
The new group appears in the top pane of the groups page.
To modify a secured target group:
Log in to the Audit Vault Server console as an auditor.
Click the Secured Targets tab.
From the Manage menu on the left, click Groups.
Preconfigured groups are listed in the bottom pane, and user-defined groups are listed in the top pane.
You can adjust the appearance of the list in the bottom pane from the Actions menu.
Click the group name.
In the Modify Secured Target Group page, select secured targets you want to add or remove, and then click Add Members or Remove Members.
Optionally, you can change the name or description of a user-defined group.
Click Save.
To ensure that the correct compliance reports are available for secured target databases, you add those secured targets to the appropriate preconfigured group in the Audit Vault Server.
To assign a secured target to a compliance group:
If you have the super auditor role in Oracle Audit Vault and Database Firewall, you can set access rights for secured targets and groups. Only auditors that have been granted access to specific secured targets or groups will be able to see them or data related to them. You can manage access by secured target or group, or by user.
See Also:
Managing User Accounts and Access for instructions.