The Host Monitor mode of Oracle Audit Vault and Database Firewall deployment runs on a host server to send data back to the database firewall. It requires an enforcement point to provide a processing point for the traffic received. There are no additional interfaces required. This deployment involves setting up a null enforcement point using a proxy port on the management interface.

The upper part of the diagram consists of two blocks. The one on the left is management network. This block has three icons: Oracle Audit Vault Server, database firewall, and the switch. The Oracle Audit Vault Server is connected to the database firewall. They are both linked to the switch at the bottom. The switch icon is then connected to the network router icon below.

The switch in the database network is connected to one or multiple database instances. On the other side, it is connected to the clients.

The switch icon is then connected to the network router icon below.

The block below the router is the client network. It consists of multiple clients. The clients connect to the database network through the switch and then to the network router. The router is located between the database network and the client network. It is also connected to the switch in the management network.