About Configuring Database Firewall

Learn how to configure Database Firewall.

The way in which you configure the system and firewall settings for each Database Firewall depends on your overall plan for deploying Oracle Database Security Central.

When you configure a Database Firewall instance, you identify the Audit Vault Server that will manage the specific Firewall. Depending on your plan for the overall Oracle Database Security Central system configuration, you also configure the traffic sources, and determine the deployment types. The following are the Database Firewall deployment types:

• Monitoring (Out-of-Band)

• Monitoring (Host Monitor)

• Monitoring / Blocking (Proxy)

Note:

• The Audit Vault Server and the Database Firewall server are software appliances. You must not make any changes to the Linux operating system through the command line on these servers unless following official Oracle documentation or under guidance from Oracle Support.

• Traffic transfers from the Database Firewall to the Audit Vault Server as quickly as possible given the available resources and design limits. It can take a few minutes between the moment that an audit record is recorded in the target database and when it is stored on the Audit Vault Server.

Basic firewall configuration consists of these four steps:

1. Specifying the Audit Vault Server Certificate and IP Address

2. Managing the Oracle Database Firewall Network and Services Configuration

3. Setting the Date and Time in Database Firewall

4. Configuring the Database Firewall and Its Traffic Sources on Your Network

After configuring the Database Firewalls, perform the following tasks:

• Configure Database Firewall monitoring points for each database target.

• You can optionally set up resilient pairs of Database Firewalls for a high availability environment.

  See Also:

  • Summary of Configuration Steps to understand the high level workflow for configuring the Oracle Database Security Central system.

  • Planning Your Oracle Database Security Central System Configuration for an overview of the planning steps.

  • Configuring Database Firewall Monitoring Points

  • High Availability in Oracle DBSecCentral to set up resilient pairs of Database Firewalls for a high availability.