Oracle Audit Vault and Database Firewall provides a first line of defense for databases and consolidates audit data from databases, operating systems, and directories. A highly accurate SQL grammar-based technology monitors and blocks unauthorized SQL traffic before it reaches the database.

Prerequisties

• Oracle Database administration experience
• Networking knowledge and experience

Course Content
Introduction to Oracle Audit Vault and Database Firewall

• Oracle Audit Vault and Database Firewall Features
• Oracle Audit Vault and Database Firewall Components
• Oracle Audit Vault and Database Firewall Architecture
• Supported Secured Targets
• Integrating Oracle AVDF with Third-party Products
• Oracle AVDF Administrator Tasks
• Oracle AVDF Auditor Tasks

Planning the Oracle Audit Vault and Database Firewall Implementation

• Evaluating Oracle AVDF Configuration Requirements
• Configuring Oracle AVDF and Deploying the Audit Vault Agent
• Configuring Oracle AVDF and Deploying the Database Firewall

Installing the Audit Vault Server

• Requirements for Installation of Oracle AVDF
• Network Interface Card Requirements
• Installing an Audit Vault Server
• Performing Audit Vault Server Post-Installation Tasks

Configuring the Audit Vault Server

• Specifying the Server Date and Time
• Setting or Changing the Audit Vault Server Network Settings
• Configuring or Changing the Audit Vault Server Services
• Configuring the Audit Vault Server Syslog Destinations
• Defining Datafile Archiving Locations
• Creating Archiving Policies
• Configuring the Email Notification Service
• Configuring Administrative Accounts for the Audit Vault Server

Configuring Oracle AVDF and Deploying the Audit Vault Agent

• Understanding Network Requirements for AV Server and AV Agent
• Registering Hosts in the Audit Vault Server
• Deploying and Activating the Audit Vault Agent on Host Computers
• Registering the Audit Vault Agent as a Windows Service
• Creating User Accounts for Oracle AVDF
• Registering Secured Targets
• Configuring Audit Trails for Secured Targets
• Configuring Stored Procedure Auditing

Networking and Oracle AVDF

• Overview of the OSI 7-level Network Model
• Overview of IPv4 Addressing and Routing
• Overview of MAC Addressing
• Overview of Virtual LANs (VLANs)
• Overview of Spanning Tree Protocol (STP)
• Oracle AVDF Deployment Models (inline, out of band, and proxy)

Installing a Database Firewall

• Requirements for Installation of a Database Firewall
• Network Interface Card (NIC) Requirements
• Installing a Database Firewall
• Performing Database Firewall Post-Installation Tasks

Configuring Oracle AVDF and Deploying Database Firewall

• Configuring Basic Settings for Database Firewall
• Configuring a Database Firewall on Your Network
• Associating a Database Firewall with the Audit Vault Server
• Registering Secured Targets
• Configuring Enforcement Points
• Configuring and Using Database Interrogation
• Configuring and Using Database Response Monitoring

Using Host Monitoring

• Overview of Host Monitoring
• Installing and Enabling Host Monitoring
• Checking the Status of the Host Monitor
• Stopping the Host Monitor

Configuring High Availability

• Overview of Oracle AVDF High Availability Architecture (resilient pairs)
• Configuring a Resilient Pair of Audit Vault Servers
• Configuring a Resilient Pair of Database Firewalls

Creating Custom Collection Plug-ins

• Overview of Audit Collection Plug-ins
• General Procedure for Writing Audit Collection Plug-ins
• Setting Up Your Development Environment (downloading the SDK)
• Creating Audit Collection Plug-ins
• Packaging Audit Collection Plug-ins

Managing the Audit Vault Server

• Starting an Archive Job
• Restoring Audit Data
• Monitoring Jobs

Managing the Database Firewalls

• Viewing and Capturing Network Traffic in a Database Firewall
• Viewing the Status and Diagnostics Report for a Database Firewall
• Removing a Database Firewall from the Audit Vault Server

Overview of the Auditing and Reporting Features

• Overview of Database Firewall Policies
• Overview of Oracle Database Audit Policies
• Overview of Reports and Report Schedules
• Overview of Oracle Database Entitlement Auditing
• Overview of Oracle Database Stored Procedure Auditing
• Overview of Alerts and Email Notifications