Summary of Configuration Steps

Learn about the Oracle DBSecCentral configuration steps.

With Oracle DBSecCentral, you can deploy Oracle Audit Vault Agent, Oracle Database Firewall, or both. This section suggests the high-level steps for configuring Oracle DBSecCentral when you are:

Configuring Oracle Database Security Central and Deploying the Agent

Use this procedure to configure Oracle Database Security Central (Oracle DBSecCentral) and deploy the Audit Vault Agent or configure agentless collection.

  1. Configure the Audit Vault Server. See Configuring Audit Vault Server.

  2. If you’re deploying the Audit Vault Agent, register the host computers where you’ll deploy the Audit Vault Agent. Then deploy and start the Audit Vault Agent on those hosts. See Registering Hosts and Deploying the Agent.

    Note: You can use agentless collection instead of the Audit Vault Agent for Oracle Database table audit trails and Microsoft SQL Server directory audit trails for .sqlaudit and .xel (Extended Events) files. The total number of audit trails configured for agentless collection must not exceed 20. See Adding Audit Trails with Agentless Collection.

  3. Create user accounts on your targets for Oracle Database Security Central. See Scripts for Oracle DBSecCentral Account Privileges on Targets.

  4. Register the targets that you’re monitoring in the Audit Vault Server, configure data retention policies, and configure audit trails for these targets. See Configuring Targets, Audit Trails, and Database Firewall Monitoring Points.

After you configure the system as an administrator, the Oracle DBSecCentral auditor creates and provisions audit policies for targets and generates various reports.

Configuring Oracle Database Security Central and Deploying Oracle Database Firewall

Configure and deploy Oracle Database Security Central to enable you to create firewall policies and assign them to the targets.

Complete this procedure to configure and deploy Oracle Database Security Central.

  1. Configure the basic Oracle Database Firewall settings and associate the firewall with Oracle Audit Vault Server. Then configure the firewall on your network.

    See Configuring Database Firewall.

  2. Configure Oracle Audit Vault Server and associate each Oracle Database Firewall with the server.

    See Configuring Audit Vault Server.

  3. Register the targets that you are monitoring with Oracle Database Firewall in Oracle Audit Vault Server. Then configure the monitoring points for these targets. Optionally, if you want to also monitor the database response to SQL traffic, then use the scripts and configuration steps.

    See Configuring Targets, Audit Trails, and Database Firewall Monitoring Points

After configuring the system as administrator, the Oracle Database Security Central auditor creates firewall policies and assigns them to the targets. Your role and tasks as an auditor are described in Oracle Database Security Central Auditor’s Guide.