Reference for Network Firewall

This guide lists the predefined objects in Resource Analytics for Oracle Network Firewall. You can find information about views, entity relationships, subject areas, and sample queries.

Views

This section provides information about views within Resource Analytics Network Firewall and their columns, data types, keys, and the referred view and column names. The following views are available:

Network Firewall Views
NameDescription
NETWORK_FIREWALL_ADDRESS_LIST_DIM_V This view stores information on address lists with reference names for policies.
NETWORK_FIREWALL_APPLICATION_GROUP_DIM_VThis view stores information on groups of applications referenced by policy rules.
NETWORK_FIREWALL_APPLICATION_DIM_VThis view stores information on protocol identifiers and protocol-specific parameters.
NETWORK_FIREWALL_CHILD_RESOURCE_DETAILS_DIM_VThis view stores information on all network firewall child resources.
NETWORK_FIREWALL_CORRELATION_DIM_VThis view stores information on the policy associated with a network firewall.
NETWORK_FIREWALL_DECRYPTION_PROFILE_DIM_VThis view stores information on decryption profiles used for firewall policies.
NETWORK_FIREWALL_DECRYPTION_RULE_DIM_V This view stores information on decryption rules used in firewall policies.
NETWORK_FIREWALL_DIM_VThis view stores information on NetworkFirewall, which is a security resource associated with a policy to control incoming and outgoing traffic based on rules.
NETWORK_FIREWALL_FACT_VFact table for network firewalls.
NETWORK_FIREWALL_MAPPED_SECRET_DIM_V This view stores information on mapped secrets used on firewall policy rules.
NETWORK_FIREWALL_NAT_RULE_DIM_VThis view stores information on NAT rules to define translation in firewall policies.
NETWORK_FIREWALL_POLICY_DIM_VThis view stores information on a set of policy rules and configuration for use with Network Firewall.
NETWORK_FIREWALL_SECURITY_RULE_DIM_V This view stores information on security rules used in firewall policy rules.
NETWORK_FIREWALL_SERVICE_DIM_V This view stores information on services identified by port and protocol.
NETWORK_FIREWALL_SERVICE_LIST_DIM_V This view stores information on groups of services referenced by policy rules.
NETWORK_FIREWALL_TUNNEL_INSPECTION_RULE_DIM_VThis view stores information on tunnel inspection rules used in firewall policies.
NETWORK_FIREWALL_URL_LIST_DIM_VThis view stores information on URL pattern lists in firewall policies.

The suffixes in the view names specify the view type:

  • FACT_V: Fact
  • DIM_V: Dimension

Relationship Diagram

This section provides diagrams that define the logical relationship of a fact table with different dimension tables.

The contents of each view and their relationships are listed in the following file: Network Firewall views.

This diagram shows the relationship of the Network Firewall fact view with different dimension views.

NETWORK_FIREWALL_FACT_V
Relationship diagram showing the fact table, NETWORK_FIREWALL_FACT_V connected to seven dimension tables, COMPARTMENT_DIM_V, NETWORK_FIREWALL_POLICY_DIM_V, VCN_SUBNET_DIM_V, NETWORK_FIREWALL_DIM_V, VCN_NETWORK_SECURITY_GROUP_BRIDGE_DIM_V, VCN_NETWORK_SECURITY_GROUP_DIM_V, and VCN_DIM_V.

Relationships exist among dimensions. Dimensions can be joined directly to each other. These diagrams show the relationship between dimension views.

NETWORK_FIREWALL_ADDRESS_LIST_DIM_V
Relationship diagram showing the dimension table, NETWORK_FIREWALL_ADDRESS_LIST_DIM_V.

NETWORK_FIREWALL_APPLICATION_GROUP_DIM_V
Relationship diagram showing the dimension table, NETWORK_FIREWALL_APPLICATION_GROUP_DIM_V.

NETWORK_FIREWALL_APPLICATION_DIM_V
Relationship diagram showing the dimension table, NETWORK_FIREWALL_APPLICATION_DIM_V.

NETWORK_FIREWALL_DECRYPTION_PROFILE_DIM_V
Relationship diagram showing the dimension table, NETWORK_FIREWALL_DECRYPTION_PROFILE_DIM_V.

NETWORK_FIREWALL_DECRYPTION_RULE_DIM_V
Relationship diagram showing the dimension table, NETWORK_FIREWALL_DECRYPTION_RULE_DIM_V.

NETWORK_FIREWALL_MAPPED_SECRET_DIM_V
Relationship diagram showing the dimension table, NETWORK_FIREWALL_MAPPED_SECRET_DIM_V.

NETWORK_FIREWALL_NAT_RULE_DIM_V
Relationship diagram showing the dimension table, NETWORK_FIREWALL_NAT_RULE_DIM_V.

NETWORK_FIREWALL_SECURITY_RULE_DIM_V
Relationship diagram showing the dimension table, NETWORK_FIREWALL_SECURITY_RULE_DIM_V.

NETWORK_FIREWALL_SERVICE_LIST_DIM_V
Relationship diagram showing the dimension table, NETWORK_FIREWALL_SERVICE_LIST_DIM_V.

NETWORK_FIREWALL_SERVICE_DIM_V
Relationship diagram showing the dimension table, NETWORK_FIREWALL_SERVICE_DIM_V.

NETWORK_FIREWALL_TUNNEL_INSPECTION_RULE_DIM_V
Relationship diagram showing the dimension table, NETWORK_FIREWALL_TUNNEL_INSPECTION_RULE_DIM_V.

NETWORK_FIREWALL_URL_LIST_DIM_V
Relationship diagram showing the dimension table, NETWORK_FIREWALL_URL_LIST_DIM_V.

NETWORK_FIREWALL_CHILD_RESOURCE_DETAILS_DIM_V
Relationship diagram showing the dimension table, NETWORK_FIREWALL_CHILD_RESOURCE_DETAILS_DIM_V.

Sample Queries

Sample queries for Network Firewall.

Show all the network firewalls and their associated policy in each compartment :
SELECT COMPARTMENT_ID, NETWORK_FIREWALL_ID, NETWORK_FIREWALL_POLICY_ID
FROM OCIRA.NETWORK_FIREWALL_FACT_V;
Show the subnet details for the subnet associated with each network firewall:
SELECT N.NETWORK_FIREWALL_ID, S.*
FROM OCIRA.NETWORK_FIREWALL_FACT_V N
LEFT JOIN OCIRA.VCN_SUBNET_DIM_V S ON N.OCIRA_SUBNET_KEY = S.OCIRA_SUBNET_KEY;
List all the resources associated with a specific firewall policy:
SELECT
    OCIRA_RESOURCE_KEY,
    COMPARTMENT_ID,
	NAME, 
	PARENT_RESOURCE_ID,
	RESOURCE_TYPE,
	REGION
FROM
    OCIRA.NETWORK_FIREWALL_CHILD_RESOURCE_DETAILS_DIM_V
WHERE
    PARENT_RESOURCE_ID = '<YOUR_FIREWALL_POLICY_OCID>'  -- replace with the target firewall policy OCID;

Data Lineage

The Customer Experience Semantic Model Lineage spreadsheet and Metric Calculation Logic spreadsheet for Network Firewall provides an end-to-end data lineage summary report for physical and logical relationships in your data.

For more information, see Data Lineage.

Subject Areas

This section provides information on the subject areas with data you maintain in Network Firewall. These subject areas, with their corresponding data, are available for you to use when creating and editing analyses and reports. The information for each subject area includes:

  • Description of the subject area.

  • Business questions that can be answered by data in the subject area, with a link to more detailed information about each business question.

  • Job-specific groups and duty roles that can be used to secure access to the subject area, with a link to more detailed information about each job role and duty role.

  • Primary navigation to the work area that's represented by the subject area.

  • Time reporting considerations in using the subject area, such as whether the subject area reports historical data or only the current data. Historical reporting refers to reporting on historical transactional data in a subject area. With a few exceptions, all dimensional data are current as of the primary transaction dates or system date.

  • The lowest grain of transactional data in a subject area. The lowest transactional data grain decides how data are joined in a report.

  • Special considerations, tips, and things to look out for in using the subject area to create analyses and reports.

The subject area is: