The Out-of-Band mode of Database Firewall deployment is the simplest deployment mode overall for a non-blocking policy requirement. This deployment sniffs traffic directly from the switch and is non invasive on the network. There is no additional load on the Database or the clients. There is no latency or failure. This can be deployed on high availability mode.

The upper part of the diagram consists of two blocks. The one on the left is the management network. This block has three icons: Oracle Audit Vault Server, database firewall, and the switch. The Oracle Audit Vault Server is connected to the database firewall. They are both linked to the switch at the bottom. The switch icon is then connected to the network router icon below.

The database firewall is connected to the database firewall proxy source icon in the database network on the right. This icon is connected to the switch which is in turn connected to one or more databases.

The switch icon is then connected to the network router icon below.

The block below the router is the client network. It consists of multiple clients. The clients connect to the database network through the switch and then to the network router. The router is located between the database network and the client network. It is also connected to the switch in the management network.