The image sigcc_3v_001.png describes the Oracle AVDF architecture.

The middle of the image shows a Database Firewall at the top, with an arrow pointing to an Audit Vault Server at the bottom. The arrow is labeled "Database Firewall Events."

At the top, two icons are shown to the left of the Database Firewall, representing users and applications. Several arrows point from the users and applications to the Database Firewall. Above the Database Firewall are three icons representing: Green for Allow, Yellow for Alert or Warn, Red for Block.

Arrows point from the Database Firewall to three database icons on the right. These contain. Next to these database icons there is a text box labeled "Databases," with a small icon representing the Audit Vault Agent. The box labeled "Databases" lists Oracle, MySQL, Sybase, IBM, and Mircrosoft. An arrow, labeled "Audit Data" points from the databases to the Audit Vault Server.

On the lower right of the image there is a text box labeled "Other Systems," which lists OS, Directory Services, File System and Custom Audit Logs. An arrow labeled "Audit Data, Event Logs" points from this text box to the Audit Vault Server.

At the bottom, to the left of the Audit Vault Server, a user labeled "Auditor" is depicted. Between this user and the Audit Vault Server are icons representing Reports, Alerts, and Policies.