Deploying Audit Vault Agents
Learn about deploying Audit Vault Agents.
Audit Vault Agent is a component of Oracle Oracle Database Security Central that you deploy on a machine (usually the same host as the target) to collect audit data from targets.
Prerequisite: OCI virtual firewall for your VCN must be configured to allow ingress traffic on ports 1521 and 1522 for Audit Vault Server. See OCI Access and Security for complete information.
Follow these steps to deploy an Audit Vault Agent:
-
Register the Audit Vault Agent machine on Audit Vault Server. In some cases, you need to specify
AGENT_PHYSICAL_ADDRESS_XX(where XX can be a number from 01 to 99) Agent attribute. See Registering Hosts on the Audit Vault Server for complete information. -
Download the Audit Vault Agent software from Oracle Database Security Central console to the Agent machine.
-
Install the Audit Vault Agent software on the Agent machine.
-
Activate and start the Audit Vault Agent.
See Also: Registering Hosts and Deploying the Agent
Audit Vault Agent communicates to Audit Vault Server using a JDBC connect string that contains the IP address of the Audit Vault Server. The connect string is automatically generated after post instance creation steps. Specify the IP address that must be used in the connect string by filling in the AVS IP for Agent Communication section in the Post installation configuration page of the Oracle Database Security Central console. If an IP address is not specified, the private IP address of the Audit Vault Server is used.
Follow these guidelines for the type of IP address to be specified in the Post installation configuration page of the Audit Vault Server:
-
If you are expecting to collect audit data from any target outside of OCI, then specify a public IP address of the Audit Vault Server.
-
If you are expecting to collect audit data from targets only in OCI, then specify a private IP address of the Audit Vault Server.
-
If you are expecting to deploy Database Firewall in Monitoring (Host Monitor) mode for targets only in OCI, then specify the private IP address of the Audit Vault Server.
Table 2 Platform Support Matrix for Audit Vault Agent and Host Monitor Agent
| Platform | Audit Vault Agent Deployment | Host Monitor Agent Deployment |
|---|---|---|
| Oracle Linux 64 bit (OCI) | Yes | Yes |
| Oracle Linux 64 bit (outside OCI) | Yes | No |
| Microsoft Windows Server (x86-64) (OCI) | Yes | Yes |
| Microsoft Windows Server (x86-64) (outside OCI) | Yes | No |