How to configure oracle audit vault and database firewall to protect oracle real application clusters

1. Copyright (c) 2020, Oracle. All rights reserved. Oracle Confidential.
In this Document
Goal
Solution
Database Activity Monitoring mode (DAM)
Database Policy Enforcement mode (DPE)
References
APPLIES TO:
Oracle Audit Vault and Database Firewall - Version 12.1.0.0 and later
Information in this document applies to any platform.
GOAL
The primary focus of this document will be the deployment and configuration of AVDF relating specifically to the
Database Firewall component. Having read this document, customers should be able to deploy DBFW to protect
Oracle RAC in either Activity Monitoring mode (DAM) or Policy Enforcement mode (DPE).
SOLUTION
The Database Firewall component of the AVDF system can be deployed in Database Activity Monitoring (DAM)
mode, or Database Policy Enforcement (DPE) mode, commonly referred to as blocking mode. Before proceeding
with the configuration, it is important to know and understand what the intentions for this deployment are as
this will greatly influence the configuration within the Audit Vault Server.
If the Secured Target has been configured with Oracle Advanced Security Option, Direct Database Interrogation
(DDI) should be set up for each of the Enforcement points which will be created. Further information can be
found in the Oracle Audit Vault and Database Firewall documentation here –
http://docs.oracle.com/cd/E37100_01/doc.121/e27776/secured_targets.htm#SIGAD40734
Database Activity Monitoring mode (DAM)
When in this mode, the Database Firewall applies rules in a firewall policy to monitor and raise alerts about
potentially harmful SQL traffic to your Secured Target database, it does not block or substitute SQL statements.
How to configure Oracle Audit Vault and Database Firewall to protect Oracle
Real Application Clusters (Doc ID 2013248.1)
To Bottom
Modified: 01-Aug-2016 Type: HOWTO