Oracle Accessibility Conformance Report

VPAT® Version 2.3 - April 2019

Name of Product:

Oracle Cloud Infrastructure (OCI) Network Firewall - UI June 2023

Product Description:

The Network Firewall (NFW) service will be used by customers to filter and inspect traffic in their virtual networks. Additional functionalities will include Logging, Intrusion Detection Prevention System, and composability with other OCI network services. This will protect customers on-premises applications against layer 3- 7 cyber attacks.

Date:

04-Jul-2023

Archive Note:

This VPAT applies to only version June 2023. It does not apply to any versions of Oracle Cloud Infrastructure (OCI) Network Firewall - UI after this. This VPAT has been superseded by Oracle Cloud Infrastructure (OCI) Network Firewall - UI February 2024.

Contact Information:

accessible_ww@oracle.com

Notes:

This ACR does not cover:

APIs and backend services
Command-Line Interfaces

Dependent Products

This product interacts with or is built with the other Oracle products listedin this section. Click below to view information about the accessibility ofthese dependent products. Products listed are the versions available at thetime of publication of this document; newer documents may be available that supersedethese versions.

Oracle Cloud Infrastructure (OCI) Console Homepage, Navigation Menu, and Core Services April 2023

Evaluation Methods Used:

Oracle's policy is to design, develop and test both products and documentation to be accessible. The recommended styles of testing for accessibility include: (i) algorithmic automated tests, (ii) human judgement tests such as tool-assisted tests, visual inspection and manual operation, and (iii) testing with assistive technology by people with and without disabilities. Additional information about Oracle's accessibility program is available on http://www.oracle.com/corporate/accessibility/index.html

Accessibility Standards/Guidelines

This report covers the degree of conformance for the following accessibility standard/guideline:

Standard/Guideline	Included In Report
Web Content Accessibility Guidelines 2.1	Level A - Yes Level AA - Yes Level AAA - No
Revised Section 508 standards published January 18, 2017 and corrected January 22, 2018	Yes

Terms

The terms used in the Conformance Level information are defined as follows:

Supports: The functionality of the product has at least one method that meets the criteria without known defects or meets with equivalent facilitation.
Partially Supports: Some functionality of the product does not meet the criteria.
Does Not Support: Majority of functionality of the product does not meet the criteria.
Not Applicable: The criteria are not relevant to the product.

WCAG 2.1 Report

Table 1 also documents conformance with:

Section 508: Chapter 5 - 501.1 Scope, 504.2 Content Creation or Editing, and Chapter 6 - 602.3 Electronic Support Documentation

Note: When reporting on conformance with the WCAG 2.1 Success Criteria, they are scoped for full pages, complete processes, and accessibility-supported ways of using technology as documented in the WCAG 2.1 Conformance Requirements.

Table 1: WCAG Conformance Criteria

Criteria	Conformance Level	Remarks and Explanations
1.1.1 Non-text Content (Level A)	Partially Supports	The product was tested for: Images that convey information have meaningful alternative text using ALT Images that are decorative are marked up using ALT=”” or CSS background images Controls have an associated name Non-text characters are not used or have meaningful alternative text CAPTCHAs are not used Information shown in complex images such as charts is also available in an alternative textual form (e.g. a data table) The following tickets track the identified issues: VNUX-5821 - When adding a decryption profile when you focus on the check image under the decryption profile type section it should announce that it is checked VNUX-6021 - Navigating to a list that supports the sort functionality (ex. firewall list, policy list, log messages, etc.) when using a screen reader does not announce the sort direction when you sort
1.2.1 Audio-only and Video-only (Prerecorded) (Level A)	Not Applicable	The product has no multimedia.
1.2.2 Captions (Prerecorded) (Level A)	Not Applicable	The product has no multimedia.
1.2.3 Audio Description or Media Alternative (Prerecorded) (Level A)	Not Applicable	The product has no multimedia.
1.2.4 Captions (Live) (Level AA)	Not Applicable	The product has no multimedia.
1.2.5 Audio Description (Prerecorded) (Level AA)	Not Applicable	The product has no multimedia.
1.3.1 Info and Relationships (Level A)	Partially Supports	The product was tested for: User interface component labels are associated with the fields they are labeling Headings are encoded with HTML heading tags List markup is used for marking up lists Groups of components are marked up with their description Style sheets are used only to change the layout and presentation on the screen Table markup is used for marking up data tables, including row and column headers and table captions/summaries where appropriate The following tickets track the identified issues: VNUX-5804 - Landmarks currently do not have a unique role or role/label/title (i.e. accessible name) combination in the listing views of the navigation menu and the sub resource navigation menus in detail views VNUX-5844 - When creating a policy the decryption rules list footer doesn't have a unique role. VNUX-5900 - On all pages in the plugin the page renders multiple H1s which confuses the purposes of headers in the network firewall plugin VNUX-5905 - OCID name doesn't get announced on the firewall work request page VNUX-6071 - When adding two or more security rules under the create policy workflow, a screen reader does not announce the correct reorder options, but rather states "1 of 1" for each selection instead of "x-number of total-number"
1.3.2 Meaningful Sequence(Level A)	Partially Supports	The product was tested for: The sequence of elements in the DOM matches a logical reading sequence The following tickets track the identified issues: VNUX-6070 - Hitting tab after the "Copy" button on the work request details page results in the screen reader reading a non-visible item on the page. It will ask the user to hit enter at the end as well.
1.3.3 Sensory Characteristics(Level A)	Supports	The product was tested for: Instructions provided do not refer to things solely based on their sensory characteristics such as shape, size, visual location, orientation, color, or sound Instructions provided which refer to graphics include a reference to the text alternative of the graphic
1.3.4 Orientation (Level AA)	Supports	The product was tested for: Text is displayed in both device orientations without loss of functionality or visibility of the text. A fixed display orientation is required for essential functionality.
1.3.5 Identify Input Purpose (Level AA)	Supports	The product was tested for: There are no text fields that collect information about the user
1.4.1 Use of Color(Level A)	Supports	The product was tested for: Information conveyed by color is available in alternative formats, such as shape, text, font weight Information conveyed by color has a contrast ratio of at least 3:1
1.4.2 Audio Control(Level A)	Not Applicable	The product has no multimedia.
1.4.3 Contrast (Minimum) (Level AA)	Partially Supports	The product was tested for: Large-scale text and images of large-scale text have a contrast ratio of at least 3:1 Remaining text and images of text have a contrast ratio of at least 4.5:1 The following tickets track the identified issues: VNUX-5805 - When in a table with a link in a cell, there is a color contrast error for links in that selected row(s) VNUX-5808 - The firewall list page has a color contrast error between foreground and background for "no tag filters applied" VNUX-5809 - All RichSelect placeholder text do not meet contrast guidelines VNUX-5813 - Inactive workflow steps do not have enough contrast VNUX-5824 - On the Firewall List Create Panel, there is a color contrast error between foreground and background for "Select a VCN" VNUX-5841 - On the Create capture filter page, there is a contrast error for the "optional" label and hint text
1.4.4 Resize text(Level AA)	Supports	The product was tested for: Text can be resized up to 200% without loss of content or functionality
1.4.5 Images of Text(Level AA)	Supports	The product was tested for: Images of text are not used.
1.4.10 Reflow (Level AA)	Partially Supports	The product was tested for: Text information reflows so that only one direction of scrolling is required while at 400% zoom. An alternative mobile user interface is available and is accessed from the main application. Content that requires two-dimensional layout only presents scroll bars in the component used to present the two-dimensional content. The following tickets track the identified issues: VNUX-5798 - Using 400% Zoom, the text does not automatically reflow for all pages in NFW VNUX-5879 - When zoomed to 400% can't scroll around the add/edit tags to firewall modal. VNUX-5899 - When zoomed to 400% edit application/URL/IP address list panel are not scrollable. VNUX-5901 - When zoomed to 400% delete application/URL/IP address list modal are not scrollable
1.4.11 Non-text Contrast (Level AA)	Partially Supports	The product was tested for: Non-text items have a contrast ratio of at least 3:1 The following tickets track the identified issues: VNUX-5803 - Capture Filter status image/gem does not have enough contrast VNUX-5877 - Enable switches in log-components does not have correct contrasted when focused
1.4.12 Text Spacing (Level AA)	Supports	The product was tested for: When the following attributes and no others are modified there is no loss in functionality or content: Line height (line spacing) to at least 1.5 times the font size Spacing following paragraphs to at least 2 times the font size Letter spacing (tracking) to at least 0.12 times the font size Word spacing to at least 0.16 times the font size
1.4.13 Content on Hover or Focus (Level AA)	Supports	The product was tested for: Dismissable -The content can be dismissed without moving the pointer or keyboard focus Hoverable - When pointer hover triggers additional content, the pointer can be moved over the additional content without the additional content disappearing Persistent - The additional content remains visible until the hover or focus trigger is removed, the user dismisses it, or its information is no longer valid.
2.1.1 Keyboard(Level A)	Partially Supports	The product was tested for: Ability to perform functions from the keyboard only, and without requiring specific timings for individual keystrokes The ability to use the product with OS keyboard aids: StickyKeys and FilterKeys (feature names may be different on different platforms) The following tickets track the identified issues: VNUX-5890 - Can't navigate to subresources under policy/firewall/work request details using screen reader VNUX-5914 - Cannot navigate the metrics graph with the keyboard on the FIrewall Metrics page VNUX-6018 - Navigating to the breadcrumbs on a subpage a screen reader does not take you to the page selected, but rather refreshes the existing page VNUX-6019 - Navigating to a menu item on a details screen (ex. firewall details, policy details, etc.) a screen reader does not take you to the page selected, but rather refreshes the existing page VNUX-6020 - Navigating to a list that has links in a column (ex. firewall list, policy list, etc.) a screen reader does not take you to the page selected, but rather refreshes the existing page
2.1.2 No Keyboard Trap (Level A)	Supports	The product was tested for: Movement of focus through each control only using the keyboard, with no "keyboard trap" that prevents focus from moving away from any control
2.1.4 Character Key Shortcuts (Level A)	Supports	The product was tested for: There are no single character keyboard shortcuts.
2.2.1 Timing Adjustable(Level A)	Supports	The product was tested for: Time limits are not used
2.2.2 Pause, Stop, Hide (Level A)	Supports	The product was tested for: There is no moving, blinking or scrolling content
2.3.1 Three Flashes or Below Threshold(Level A)	Supports	The product was tested for: No portion of the screen flickers or flashes with a frequency between 2 Hz and 55 Hz
2.4.1 Bypass Blocks(Level A)	Supports	The product was tested for: A ‘Skip to Main Content’ link is provided to skip repetitive navigation links at the top of the page. Structure and hierarchy is marked up with Header elements outside of repetitive navigation links
2.4.2 Page Titled(Level A)	Supports	The product was tested for: Pages have a meaningful title specified in the TITLE element
2.4.3 Focus Order(Level A)	Partially Supports	The product was tested for: Logical movement through the focusable components using only the keyboard, in an order that follows a meaningful sequence The following tickets track the identified issues: VNUX-5816 - A user can tab through and focus on each radio option using the arrow keys when editing a Decryption Profile (workflow & detail view) that is used by a decryption rule VNUX-5883 - Create policy workflow focus order mismatches visual order during keyboard navigation (help link after cancel button) VNUX-5884 - Create policy workflow help link can only be reached by reversed navigation with the screen reader VNUX-5886 - Under the details of an active policy OR firewall, the add tag modal announces the wrong thing when in inputs using screen reader VNUX-5898 - A screen reader still announces edit tag button after finishing editing tags and the dialog closes on firewall details page VNUX-5907 - In Safari when editing a URL list if you press ESC the focus does not return to the edit button. VNUX-6031 - On the list page, the network firewall description is announced in two separate parts VNUX-6181 - Disabled form controls are focusable on add mapped secret panel, create firewall panel, when applying tags,
2.4.4 Link Purpose (In Context)(Level A)	Supports	The product was tested for: The text of links and their surrounding paragraph, list, or table cell (with marked up table headers) is sufficient to describe their purpose
2.4.5 Multiple Ways(Level AA)	Supports	The product was tested for: Pages can be found using the provided "search" function Pages are in a site table of contents
2.4.6 Headings and Labels(Level AA)	Supports	The product was tested for: Headers describe the topic or purpose of the content below them Labels describe the purpose of the associated field
2.4.7 Focus Visible(Level AA)	Partially Supports	The product was tested for: Visual indication of the location of the focus The following tickets track the identified issues: VNUX-5865 - On the firewall list page when you press "View Tags" under "More Options" the "How do I use tags" link can not be focused on VNUX-5908 - Unable to tab to tooltips and also options select on the firewall metrics graphs VNUX-6183 - Some links cannot get focused when tabbing through the page including the management permissions on create firewall panel and "How do I use tags?" on firewall details tags
2.5.1 Pointer Gestures (Level A)	Supports	The product was tested for: There are no multipoint or path-based gesture actions.
2.5.2 Pointer Cancellation (Level A)	Supports	The product was tested for: There are no single pointer operations
2.5.3 Label in Name (Level A)	Supports	The product has been tested for: User interface components that include text or images of text and have a label, have a name that contains the text that is presented visually.
2.5.4 Motion Actuation (Level A)	Supports	The product was tested for: There are no functions that require motion of the device.
3.1.1 Language of Page(Level A)	Supports	The product was tested for: Properly set lang attribute for each page
3.1.2 Language of Parts(Level AA)	Supports	The product was tested for: No text passages are in a different language than that of the page
3.2.1 On Focus(Level A)	Supports	The product was tested for: When an element receives focus, it does not result in a substantial change to the page, an additional change of keyboard focus, or the spawning of a pop-up window
3.2.2 On Input(Level A)	Supports	The product was tested for: Changes in the value of user interface components does not result in a substantial change to the page, an additional change of keyboard focus, or the spawning of a pop-up window
3.2.3 Consistent Navigation(Level AA)	Supports	The product was tested for: Pages that are grouped together into sets with a common navigation mechanism utilize that navigation mechanism in the same fashion, with navigation elements appearing in the same relative order each time
3.2.4 Consistent Identification(Level AA)	Supports	The product was tested for: Images and controls are used and identified consistently throughout the product
3.3.1 Error Identification(Level A)	Supports	The product was tested for: When input errors are detected, they are described to the user in text, including identifying the item where the error occur.
3.3.2 Labels or Instructions (Level A)	Partially Supports	The product was tested for: Labels or instructions are provided when the product requires user input The following tickets track the identified issues: VNUX-5896 - Apply tag filter tag value form input is missing a label
3.3.3 Error Suggestion (Level AA)	Supports	The product was tested for: Where suggestions for fixing an input error are known, they are provided to the user
3.3.4 Error Prevention (Legal, Financial, Data)(Level AA)	Partially Supports	The product was tested for: Data can be reviewed, corrected, and confirmed by the user before they are finalized The following tickets track the identified issues: VNUX-6054 - When creating a policy under the policy list page, a screen reader announces an IP address validation error even if the entered IP addresses are valid VNUX-6061 - When changing an invalid name to a valid name while creating an IP address list under the policy details page, a screen reader announces an error even though the new name is valid
4.1.1 Parsing(Level A)	Partially Supports	The product was tested for: Elements in HTML content have complete start and end tags, are properly nested, do not contain duplicate attributes, and have unique IDs The following tickets track the identified issues: VNUX-5831- The firewall metrics page has duplicate attribute IDs
4.1.2 Name, Role, Value (Level A)	Supports	The product was tested for: HTML controls have a programmatically associated name, derived from the appropriate HTML elements and attributes including LABEL, TITLE, SUMMARY, CAPTION, etc. Custom controls have appropriate state and property information conveyed using the relevant WAI-ARIA or HTML5 attributes Custom controls have a meaningful programmatically exposed name Additional state information is programmatically exposed for HTML controls, such as whether a field is ‘required’. Custom controls have appropriate roles specified using the role attribute Frames have a meaningful title specified in the title attribute
4.1.3 Status Messages (Level AA)	Partially Supports	The product was tested for: Status messages have role or properties set so information is conveyed to assistive technology without the component receiving focus. The following tickets track the identified issues: VNUX-6049 - When creating or deleting a profile using a screen reader on a decryption profile the screen reader does not announce that the creation was successful

2018 Section 508 Report

Chapter 3: Functional Performance Criteria (FPC)

Criteria	Conformance Level	Remarks and Explanations
302.1 Without Vision	Not Applicable	The product does not rely on equivalent functionality, and all aspects are addressed by the technical standards.
302.2 With Limited Vision	Not Applicable	The product does not rely on equivalent functionality, and all aspects are addressed by the technical standards.
302.3 Without Perception of Color	Not Applicable	The product does not rely on equivalent functionality, and all aspects are addressed by the technical standards.
302.4 Without Hearing	Not Applicable	The product does not rely on equivalent functionality, and all aspects are addressed by the technical standards.
302.5 With Limited Hearing	Not Applicable	The product does not rely on equivalent functionality, and all aspects are addressed by the technical standards.
302.6 Without Speech	Not Applicable	The product does not rely on equivalent functionality, and all aspects are addressed by the technical standards.
302.7 With Limited Manipulation	Not Applicable	The product does not rely on equivalent functionality, and all aspects are addressed by the technical standards.
302.8 With Limited Reach and Strength	Not Applicable	The product does not rely on equivalent functionality, and all aspects are addressed by the technical standards.
302.9 With Limited Language, Cognitive, and Learning Abilities	Not Applicable	The product does not rely on equivalent functionality, and all aspects are addressed by the technical standards.

Chapter 4: Hardware

These criteria are all Not Applicable because the product is not Hardware

Chapter 5: Software

Criteria	Conformance Level	Remarks and Explanations
501.1 Scope - Incorporation of WCAG 2.0 AA	Supports	See the responses in the WCAG 2.0 section of this report.
502 Interoperability with Assistive Technology	Heading cell - no response required	Heading cell - no response required
502.2.1 User Control of Accessibility Features	Not Applicable	The product is not a platform or does not have access to platform accessibility features.
502.2.2 No Disruption of Accessibility Features	Not Applicable	The product is designed to be isolated from the underlying platform.
502.3 Accessibility Services	Heading cell - no response required	Heading cell - no response required
502.3.1 Object Information	Not Applicable	The product is not a platform or does not have access to platform accessibility features.
502.3.2 Modification of Object Information	Not Applicable	The product is not a platform or does not have access to platform accessibility features.
502.3.3 Row, Column, and Headers	Not Applicable	The product is not a platform or does not have access to platform accessibility features.
502.3.4 Values	Not Applicable	The product is not a platform or does not have access to platform accessibility features.
502.3.5 Modification of Values	Not Applicable	The product is not a platform or does not have access to platform accessibility features.
502.3.6 Label Relationships	Not Applicable	The product is not a platform or does not have access to platform accessibility features.
502.3.7 Hierarchical Relationships	Not Applicable	The product is not a platform or does not have access to platform accessibility features.
502.3.8 Text	Not Applicable	The product is not a platform or does not have access to platform accessibility features.
502.3.9 Modification of Text	Not Applicable	The product is not a platform or does not have access to platform accessibility features.
502.3.10 List of Actions	Not Applicable	The product is not a platform or does not have access to platform accessibility features.
502.3.11 Actions on Objects	Not Applicable	The product is not a platform or does not have access to platform accessibility features.
502.3.12 Focus Cursor	Not Applicable	The product is not a platform or does not have access to platform accessibility features.
502.3.13 Modification of Focus Cursor	Not Applicable	The product is not a platform or does not have access to platform accessibility features.
502.3.14 Event Notification	Not Applicable	The product is not a platform or does not have access to platform accessibility features.
502.4 Platform Accessibility Features	Not Applicable	The product is not a platform or does not have access to platform accessibility features.
503 Applications	Heading cell - no response required	Heading cell - no response required
503.2 User Preferences	Not Applicable	The product is designed to be isolated from the underlying platform.
503.3 Alternative User Interfaces	Not Applicable	The product does not have assistive technology features.
503.4 User Controls for Captions and Audio Description	Heading cell - no response required	Heading cell - no response required
503.4.1 Caption Controls	Not Applicable	The product has no multimedia.
503.4.2 Audio Description Controls	Not Applicable	The product has no multimedia.
504 Authoring Tools	Heading cell - no response required	Heading cell - no response required
504.2 Content Creation or Editing	Not Applicable	The product is not an authoring tool.
504.2.1 Preservation of Information Provided for Accessibility in Format Conversion	Not Applicable	The product is not an authoring tool.
504.2.2 PDF Export	Not Applicable	The product is not an authoring tool.
504.3 Prompts	Not Applicable	The product is not an authoring tool.
504.4 Templates	Not Applicable	The product is not an authoring tool.

Chapter 6: Support Documentation and Services

Criteria	Conformance Level	Remarks and Explanations
602 Support Documentation	Heading cell - no response required	Heading cell - no response required
602.2 Accessibility and Compatibility Features	Not Applicable	There are no accessibility or compatibility features to document. Product uses standard HTML specifications to support accessibility.
602.3 Scope - Incorporation of WCAG 2.0 AA	Supports	See the responses in the WCAG 2.0 section of this report.
602.4 Alternate Formats for Non-Electronic Support Documentation	Not Applicable	Product documentation is in electronic format.
603 Support Services	Heading cell - no response required	Heading cell - no response required
603.2 Information on Accessibility and Compatibility Features	Supports	Oracle Global Customer Support can provide information about accessibility features of the product.
603.3 Accommodation of Communication Needs	Supports	Oracle customers have access to electronic support through My Oracle Support or by calling Oracle Support at 1.800.223.1711. Hearing-impaired customers in the U.S. who wish to speak to an Oracle Support representative may use a telecommunications relay service (TRS). Information about the TRS is available at http://www.fcc.gov/cgb/consumerfacts/trs.html, and a list of telephone numbers is available at https://www.fcc.gov/general/telecommunications-relay-services-directory. International hearing-impaired customers should use the TRS at +1.605.224.1837. An Oracle Support engineer will respond to technical issues according to the standard service request process.

Oracle Legal Disclaimer

The information above describes this product's ability to support the applicableStandards/Guidelines, subject to Oracle's interpretation of those standards(available at https://www.oracle.com/corporate/accessibility/policy.html#standards-tab) and the remarks in this document. For more information regarding the accessibility status of this product or other Oracle products, see http://www.oracle.com/corporate/accessibility or contact: accessible_ww@oracle.com.

This document is provided for information purposes only and the contents hereof are subject to change without notice. Oracle Corporation does not warrant that this document is error free, nor does it provide any other warranties or conditions, whether expressed orally or implied in law, including implied warranties and conditions of merchantability or fitness for a particular purpose. Oracle Corporation specifically disclaims any liability with respect to this document and no contractual obligations are formed either directly or indirectly by this document. Oracle further makes no representation concerning the ability of assistive technologies or other products to interoperate with Oracle products. This document addresses the named product(s) only and not prerequisite products for which Oracle supplies restricted use licenses.