3 Oracle Audit Vault and Database Firewall Pre-Install Requirements

Learn about the requirements that your system must meet before you can install Oracle Audit Vault and Database Firewall (Oracle AVDF).

• Privileges Required to Install Oracle Audit Vault and Database Firewall
  Learn about the privileges required to install Oracle Audit Vault and Database Firewall (Oracle AVDF).
• Host Monitor Requirements
  Host Monitor enables the Database Firewall to directly monitor SQL traffic in a database.
• Oracle Audit Vault and Database Firewall Hardware Requirements
  Install each Audit Vault Server and each Database Firewall (Oracle AVDF) onto its own dedicated x86 64-bit server (or Oracle VM 3.x).
• Oracle Audit Vault and Database Firewall Software Requirements
  Learn about the software requirements for Oracle Audit Vault and Database Firewall (Oracle AVDF).

3.1 Privileges Required to Install Oracle Audit Vault and Database Firewall

Learn about the privileges required to install Oracle Audit Vault and Database Firewall (Oracle AVDF).

Any user can install Oracle Audit Vault and Database Firewall. You do not need administrative privileges to complete the installation.

3.2 Host Monitor Requirements

Host Monitor enables the Database Firewall to directly monitor SQL traffic in a database.

Recommended requirements for installing Host Monitor:

1. User installing the Host Monitor must have root privileges.
2. Ensure Audit Vault Agent is running on the host machine.

3. Ensure the latest version of the following packages from the OS vendor for the specific OS version are installed on the host machine:

   • Libcap (for Linux hosts only)
   • LibPcap
   • OpenSSL
4. Ensure gmake is installed. This is required for Host Monitor to run successfully.
5. Verify and allow communication on ports 2050 - 5100 for Database Firewall.
6. Check directory permissions. All the directories in the path of the Host Monitor install location should have 755 as the permission bits starting from the root directory. Also, Host Monitor must be installed in a root owned location.

Specific requirements for installing Host Monitor on Windows platform:

1. Host Monitor must be installed by user belonging to Administrator group.
2. Install Npcap that is available in the avdf12.2.0.13.0-utility.zip bundle in Oracle Software Delivery Cloud. It is part of the Oracle Audit Vault and Database Firewall installable files. Ensure to install Npcap in WinPcap-API-compatible mode.
3. Install the latest version of OpenSSL (1.1.1g or higher) libraries. Use OpenSSL version 1.1.1i for release Oracle AVDF 12.2.0.14.0.
4. Ensure the Windows target machine has the latest update of Visual C++ Redistributable for Visual Studio 2010 (MSVCRT.dll (*) or later) package installed. This is a must to use Host Monitor on Windows.

Specific requirements for installing Host Monitor on Linux/Unix/AIX/Solaris platforms:

1. Host Monitor must be installed by root user.
2. Ensure the Input Output Completion Ports (IOCP) is set to available for IBM AIX on Power Systems (64-bit). It is set to defined by default.
3. Ensure Libcap is installed for Linux hosts.

See Also:

Enabling and Using Host Monitoring for host monitoring instructions and prerequisites.

3.3 Oracle Audit Vault and Database Firewall Hardware Requirements

Install each Audit Vault Server and each Database Firewall (Oracle AVDF) onto its own dedicated x86 64-bit server (or Oracle VM 3.x).

You can use any Intel x86-64-bit hardware platform that is supported by Oracle Audit Vault and Database Firewall's embedded operating system. Oracle Audit Vault and Database Firewall uses Oracle Linux release 6 with the Unbreakable Enterprise Kernel (UEK) version 4. For a list of compatible hardware, refer to Hardware Certification List for Oracle Linux and Oracle VM. This list contains the minimum version of Oracle Linux certified with the selected hardware. All Oracle Linux updates starting with Oracle Linux release 6 as the minimum are also certified unless otherwise noted.

Note:

Do not install Audit Vault Server or Database Firewall on a server (or Oracle VM) that is used for other activities, because the installation process formats the server, deleting any existing data and operating systems.

• Memory Requirements
  Learn about the the minimum memory requirements for Oracle Audit Vault and Database Firewall (Oracle AVDF).
• Disk Space Requirements
  Learn about the minimum disk space requirements for Oracle Audit Vault and Database Firewall (Oracle AVDF).
• Network Interface Cards
  Learn about the recommended number of network interface cards (NICs) for each x86 64-bit server.

3.3.1 Memory Requirements

Learn about the the minimum memory requirements for Oracle Audit Vault and Database Firewall (Oracle AVDF).

Each x86 64-bit server must have the following minimum memory:

• Audit Vault Server: 8 GB^Foot 1

• Database Firewall: 8 GB

3.3.2 Disk Space Requirements

Learn about the minimum disk space requirements for Oracle Audit Vault and Database Firewall (Oracle AVDF).

Each x86 64-bit server must have a single hard drive with a minimum of the following disk space:

• Audit Vault Server: 220 GB (Recommended is 300 GB)

• Database Firewall: 220 GB

Note:

Provisioning disks greater than 4PB each for fresh installation is not optimal. The disks equal to or under 4PB ensure that only one disk partition is allocated per disk group on each physical disk.

3.3.3 Network Interface Cards

Learn about the recommended number of network interface cards (NICs) for each x86 64-bit server.

Oracle recommends the following number of network interface cards (NICs) for each x86 64-bit server on which you install the following components:

• 1 NIC for the Audit Vault Server

• At least 1 NIC for a Database Firewall operating as a proxy

• At least 2 NICs for a Database Firewall in DAM Mode (monitoring only)

• At least 3 NICs for a Database Firewall in DPE Mode (monitoring and blocking. If you install the Database Firewall with fewer than 3 NICs, then you must add more NICs to make the Database Firewall DPE mode possible.

See Also:

Oracle Audit Vault and Database Firewall Administrator's Guide for information on Database Firewall modes and proxy configuration.

3.4 Oracle Audit Vault and Database Firewall Software Requirements

Learn about the software requirements for Oracle Audit Vault and Database Firewall (Oracle AVDF).

• Java SE Requirement
  The AVCLI command line utility that the Audit Vault Server administrator uses and the avpack utility (which is part of the software development kit) require Java SE version 8.
• Browser Requirements
  Learn about the browser requirements for Oracle Audit Vault and Database Firewall (Oracle AVDF).
• Audit Vault Agent Requirements
  Learn about the Audit Vault Agent requirements.
• Host Monitor Requirements
  Host Monitor enables the Database Firewall to directly monitor SQL traffic in a database.
• Target Requirements
  For targets that are on Oracle Solaris running the LDoms Manager service, svc:/ldoms/ldmd:default, ensure that the target is using LDoms version 3.2.0.1 or later.

3.4.1 Java SE Requirement

The AVCLI command line utility that the Audit Vault Server administrator uses and the avpack utility (which is part of the software development kit) require Java SE version 8.

3.4.2 Browser Requirements

Learn about the browser requirements for Oracle Audit Vault and Database Firewall (Oracle AVDF).

Note:

• See section Supported Browsers for more information on the supported browsers.
• Latest version of Adobe Flash plug-in is required to view charts and interactive reports in the Audit Vault Server console. This requirement is for releases 12.2.0.12.0 and earlier.

3.4.3 Audit Vault Agent Requirements

Learn about the Audit Vault Agent requirements.

Ensure the supported Java version is installed on the Audit Vault Agent.

See Also:

Audit Vault Agent: Supported and Tested Java Runtime Environment

3.4.4 Host Monitor Requirements

Host Monitor enables the Database Firewall to directly monitor SQL traffic in a database.

Recommended requirements for installing Host Monitor:

1. User installing the Host Monitor must have root privileges.
2. Ensure Audit Vault Agent is running on the host machine.

3. Ensure the latest version of the following packages from the OS vendor for the specific OS version are installed on the host machine:

   • Libcap (for Linux hosts only)
   • LibPcap
   • OpenSSL
4. Ensure gmake is installed. This is required for Host Monitor to run successfully.
5. Verify and allow communication on ports 2050 - 5100 for Database Firewall.
6. Check directory permissions. All the directories in the path of the Host Monitor install location should have 755 as the permission bits starting from the root directory. Also, Host Monitor must be installed in a root owned location.

Specific requirements for installing Host Monitor on Windows platform:

1. Host Monitor must be installed by user belonging to Administrator group.
2. Install Npcap that is available in the avdf12.2.0.13.0-utility.zip bundle in Oracle Software Delivery Cloud. It is part of the Oracle Audit Vault and Database Firewall installable files. Ensure to install Npcap in WinPcap-API-compatible mode.
3. Install the latest version of OpenSSL (1.1.1g or higher) libraries. Use OpenSSL version 1.1.1i for release Oracle AVDF 12.2.0.14.0.
4. Ensure the Windows target machine has the latest update of Visual C++ Redistributable for Visual Studio 2010 (MSVCRT.dll (*) or later) package installed. This is a must to use Host Monitor on Windows.

Specific requirements for installing Host Monitor on Linux/Unix/AIX/Solaris platforms:

1. Host Monitor must be installed by root user.
2. Ensure the Input Output Completion Ports (IOCP) is set to available for IBM AIX on Power Systems (64-bit). It is set to defined by default.
3. Ensure Libcap is installed for Linux hosts.

See Also:

Enabling and Using Host Monitoring for host monitoring instructions and prerequisites.

3.4.5 Target Requirements

For targets that are on Oracle Solaris running the LDoms Manager service, svc:/ldoms/ldmd:default, ensure that the target is using LDoms version 3.2.0.1 or later.

---

Footnote Legend

Footnote 1:

In this guide, 1 GB represents 2 to the 30th power bytes or in decimal notation 1,073,741,824 bytes.