Oracle Database Security Central Hardware Requirements
Install each Audit Vault Server and each Database Firewall onto its own dedicated x86 64-bit server or virtual machine (VM).
Caution: Don’t install the Audit Vault Server or Database Firewall on a server or VM that is used for other activities, because the installation process formats the server, which deletes existing data and operating systems.
See Platform Support for all supported hardware and virtualization platforms.
Memory and Space Requirements
Learn about the minimum memory requirements for Oracle Database Security Central.
Each x86 64-bit server must have the following minimum memory:
-
Audit Vault Server: 8 GB
Note:
- In this guide, 1 GB represents 2 to the 30th power bytes or in decimal notation 1,073,741,824 bytes.
- System memory reduction is not supported in Audit Vault Server after installation. However, you may increase system memory with no restrictions as long as a reboot of DBSecCentral is performed.
-
Database Firewall: 8 GB
Disk Space Requirements
Learn about the minimum disk space requirements for Oracle Database Security Central (Oracle DBSecCentral).
Each x86 64-bit server must have a single local hard drive with a minimum of the following disk space:
-
Audit Vault Server: 370 GB
-
Database Firewall: 220 GB
Note:
-
Oracle DBSecCentral must be installed on the appliance’s local disk storage. SAN storage is not supported as the default storage and boot device.
-
Any additional disks on Audit Vault Sever must be greater in size than the first disk.
-
During installation AVS will ignore all disks that are less than the minimum disk space required.
-
Oracle Database Security Central supports both BIOS and UEFI boot mode. For system with boot disk greater than 2 TB, Oracle DBSecCentral supports booting in UEFI mode only.
-
Provisioning disks greater than 4PB each for fresh installation is not optimal. The disks equal to or under 4PB, ensure that only one disk partition is allocated per disk group on each physical disk.
-
For appliance hardware specification, refer to Oracle Database Security Central Sizing Advice ( My Oracle Support Doc ID 2092683.1).
-
If installing Audit Vault Server as part of a RAC configuration, ensure you review RAC hardware requirements.
File System Layout
The installer checks for a number of conditions before allowing the installation or upgrade to be completed. Memory allocation and space checks on specific directories is an important aspect.
A minimum of at least 8 GB of memory is required. You can force the upgrade process to complete if your system has a lower amount of memory (for example 4 GB). However it is not difficult to extend memory for Oracle Database Security Central installation.Oracle Database Security Central sends daily reminders to upgrade your system’s memory.
The space checks mentioned here are a bare minimum, below which the upgrade is likely to fail.
| File System | Space Check |
|---|---|
/home |
100 MB |
/usr/local/dbfw |
200 MB |
/usr/local/dbfw/tmp |
7.5 GB |
/var/lib/oracle |
31 GB for Audit Vault Server |
/ |
2 GB |
/tmp |
1.4 GB |
/var/dbfw |
100 MB |
/var/log |
100 MB |
/var/tmp |
5 GB |
/boot |
1 GB |
Network Interface Cards
Learn about the recommended number of network interface cards (NICs) for each x86 64-bit server.
Oracle recommends the following number of network interface cards (NICs) for each x86 64-bit server on which you install the following components:
Oracle DBSecCentral does not support Niagara cards.
Table 1 Number of Network Interface Cards (NIC) Recommended for DBSecCentral Appliances
| DBSecCentral Appliance | Minimum Number of NICs Recommended |
|---|---|
| Audit Vault Server | 1 |
| Database Firewall deployed in Monitoring (Out-of-Band) mode | 2 |
| Database Firewall deployed in Monitoring (Host Monitor) mode | 2 |
| Database Firewall deployed in Monitoring / Blocking (Proxy) mode without network separation. | 1 |
| Database Firewall deployed in Monitoring / Blocking (Proxy) mode with network separation. | 3 1 NIC for management, 2 NICs for client and database network connections. |
See Also: Introduction to Oracle Database Firewall Deployment
Fiber Channel Based Multipath in Oracle Database Security Central
Learn about support for multipath in Oracle DBSecCentral.
Oracle Database Security Central supports fiber channel based storage with multipath. The redundant paths in multipath can enhance performance and utilize features like dynamic load balancing, traffic shaping, automatic path management, and dynamic reconfiguration. The connection to the disk can be made through two fiber channel ports.
Here are some important aspects of multipath in Oracle DBSecCentral:
-
It is not supported with ISCSI storage.
-
It does not support the device xvd*.
-
Multipath is supported only for Audit Vault Server installation.
-
Multipath is not supported for Database Firewall installation.
-
It does not support removable block devices. Check for removable block devices in the system as they can lead to installation failure.
Note:
In case there are removable block devices in the system, the following error may be encountered during Audit Vault Server installation:
ERROR: Failed to check if the disk is in multipath Traceback (most recent call last): File "/run/install/repo/partitions.py", line 386, in <module> main() File "/run/install/repo/partitions.py", line 372, in main write_partition_table( None ) File "/run/install/repo/partitions.py", line 322, in write_partition_table part_table = generate_partition_table_data(dev_list) File "/run/install/repo/partitions.py", line 243, in generate_partition_table_data raise RuntimeError("No disks detected") RuntimeError: No disks detected