Configuring Database Firewall Global Policy Settings

Learn how an auditor can configure or define an existing Database Firewall policy settings.

Global Policy settings in a Database Firewall represents the configuration settings applied to all the rules for a specific policy.

Prerequisite: Global Database Firewall settings can be configured after the policy is created.

1. Log in to the Oracle Database Security Central console as an auditor.

2. Select Policies.

3. From the left navigation menu, select Database Firewall Policies.

4. In this page, select the name of the specific policy.

5. Select Configuration. The following policy rules are displayed in different tabs:

   1. Login / Logout

   2. Sensitive Data Masking

   3. Unknown Traffic

   4. Policy Pattern

6. For example, select Policy Pattern In this configure the following:

   1. Under Log Pattern section, select whether to Strip binary objects and comments from log files.

   2. Under Action Rule Pattern section enter the Threshold action reset time (minutes) field. Enter a number in minutes. If you have set a Threshold in any of your policy rules, and the Threshold Action in your rule is taken, the action will not be repeated for the time you specify here. This prevents too many block/warn actions for the same rule.

   3. In the Action without substitution field, select the action to take (No response or Drop connection) if one of your policy rules is set to Block and you have not specified a substitute statement in the rule.

   4. Under the Syntax Rule Pattern section, select whether to treat Double quoted strings as identifiers. This determines whether double-quoted strings in SQL statements are treated as identifiers or string constants. If you deselect this checkbox, sensitive data masking (if used) will mask text in double quotes.

   5. For Case sensitive match, select whether this firewall policy does case sensitive matching for Client program name, Database username, and Operating system username.

7. Select Save.