ORACLE Audit Vault and Database Firewall (ORACLE AVDF)

Very good URL http://insightintooracle.blogspot.qa/2014/01/installing-oracle-avdf-database.html https://www.youtube.com/watch?v=f48Cz99iHuQ https://docs.oracle.com/cd/E37100_01/doc.121/e27778/toc.htm https://docs.oracle.com/cd/E37100_01/doc.121/e27778.pdf https://docs.oracle.com/cd/E37100_01/doc.121/e27778/preinstall.htm#SIGIG170 https://docs.oracle.com/cd/E37100_01/doc.121/e27778/install.htm#SIGIG177 Installing Oracle AVDF (Database Firewall) Server 12.1.1.1.0 Installation of Oracle Audit Vault and Database Firewall (AVDF) 12.1.1.1.0 comprises of installing Audit Vault first and then Database Firewall. Oracle Audit Vault and Database Firewall come in two different installation medias. I have discussed on installation of Oracle Audit Vault in my previous post. This document deals with the installation of Oracle Database Firewall Server only. Oracle Audit Vault and Database Firewall (Database Firewall) provides a first line of defense for databases and consolidates audit data from databases, operating systems, and directories. A highly accurate SQL grammar-based engine monitors and blocks unauthorized SQL traffic before it reaches the database. Database activity data from the network is combined with detailed audit data for easy compliance reporting and alerting. With Oracle Audit Vault and Database Firewall, auditing and monitoring controls can be easily tailored to meet enterprise security requirements. For details on Oracle AVDF please visit http://www.oracle.com/technetwork/database/database-technologies/audit-vault-and-database-firewall/overview/overview-1877404.html. Following are the top level steps that needs to be performed to install Oracle Database Firewall Server 12.1.1.1.0: A. Media Download B. Prerequisites C. Installation D. Post Installation A. Download Media 1. Download media from https://edelivery.oracle.com/. · Open a web browser. · Type https://edelivery.oracle.com/ in the address bar. · Press "" key. · Click on "Sign In / Register" button. Image AVDF-121110-DF-01.png 2. Login to edelivery Sign In / Register button redirects to the login screen. · Provide login username and password. · Click on Sign in button to login. Image AVDF-121110-DF-02.png 3. Search Required Media · In Product pack select Oracle Database. · In Platform select Linux x86-64. · Select "Oracle Audit Vault and Database Firewall 12.1.1 Media Pack for Linux x86-64". · Click on "Go" button to search. Image AVDF-121110-DF-03.png 4. Download Media · Click on "Download" button next to "Oracle Audit Vault and Database Firewall (12.1.1.1.0) - Server" to download Audit Vault Server. · Click on "Download" button next to "Oracle Audit Vault and Database Firewall (12.1.1.1.0) - Database Firewall" to download Database Firewall. I will cover this in my next post. Image AVDF-121110-DF-04.png B. Prerequisites 1. Laptop/PC · Latest and fast processors · At least 8GB memory · Windows 64 bit · At least 50 GB free HDD (Hard Disk Drive) · VirtualBox pre-installed. VirtualBox can be downloaded from https://www.virtualbox.org/wiki/Downloads. The activity was performed with release 4.3.4r91027 version of VirtualBox. · Host machine should be able to access guest machine. Later host machine has to access web console of Database Firewall server. Host Machine: IP Address : 192.168.169.174 Subnet Mask : 255.255.255.0 Gateway : 192.168.169.1 Guest Machine (DF Server): IP Address : 192.168.169.22 Subnet Mask : 255.255.255.0 Gateway : 192.168.169.1 C. Installation 1. Set Default Machine Folder. · Open VirtualBox · Select File -> Preferences Image AVDF-121110-DF-05.png Enter "D:\VM\AVDF\12111" as Default Machine Folder. Once this is set all the VMs created hence forth will be redirected to this location. Image AVDF-121110-DF-06.png 2. Create new virtual machine for Database Firewall Server. · Click on "New" icon to create new virtual machine for Database Firewall Server. Image AVDF-121110-DF-07.png 3. Give a name for Oracle Database Firewall Server. · Select Type as "Linux" · Select Version as "Oracle (64 Bit)" · Click on "Next" button to continue. Image AVDF-121110-DF-08.png 4. Specify memory size for the Virtual Machine. For testing purpose 1.5 GB memory should work. · Enter required memory. Since I have 16 GB RAM in my laptop so I have allocated 3072MB memory. · Click on "Next" button to continue. Image AVDF-121110-DF-09.png 5. Add Virtual Hard Disk Drive. · Select "Create a virtual hard drive now" option. · Click on "Create" button. Image AVDF-121110-DF-10.png 6. Select Hard Drive File Type · Select "VMDK (Virtual Machine Disk)". · Click on "Next" button to continue. This file type allows to split files into size of less than 2GB. A number of files will be automatically created by Virtual Box based on the size of Hard Drive that we specify in coming steps. Image AVDF-121110-DF-11.png 7. Storage on Physical Hard Drive · Select "Dynamically Allocated" option. · Select "Split into files of less than 2GB" check box. If this check box is selected then single Hard Disk file will be split into smaller files of less than 2GB each. Small size of files help during transfer to external hard disk drives for testing purposes. · Click on "Next" button to continue. Image AVDF-121110-DF-12.png 8. Choose a location for Hard Disk file · Provide appropriate file name for the virtual hard disk file. · Choose appropriate location to store virtual hard disk file. · Click on "Save" button to save the virtual hard disk file. Image AVDF-121110-DF-13.png 9. File Location and Size. · Review the file location. · Enter "130 GB" as the size of file. · Click on "Create" button to create Virtual Hard Disk File. Image AVDF-121110-DF-14.png NOTE: If the size of the file is less than 80 GB the installation will terminate with as shown in screenshot below. Image AVDF-121110-DF-15.png 10. Virtual Machine Details. The screen below shows details of virtual machine just created. Review the details and modify if necessary. Use Settings icon to modify any settings. Image AVDF-121110-DF-16.png 11. Select Database Firewall Installation Media. · In the main screen of VirtualBox, select "Database Firewall" Virtual machine. · Click on "Settings" icon. · Click on "Storage" · Click on "Empty" CD icon. · Click on "CD icon" on the right side. · Click on "Choose a virtual CD/DVD disk file..." Image AVDF-121110-DF-17.png 12. Choose Virtual Optical Disk file. · Select Database Firewall ISO image file "V39779-01_DF.iso". Original filename was "V39779-01.iso". · Click on "Open" button to select the file. Image AVDF-121110-DF-18.png 13. Details of Installation media. · Review the details of Database Firewall Server installation media. Image AVDF-121110-DF-19.png 14. Set Network Adapter. Installation of Oracle Database Firewall requires 3 network adapters. Network Adapter 1: · Select Network on the left pane. · Select "Adapter 1" tab · Select Enable Network Adapter on the right pane. · Select Attached to as "Bridged Adapter". · Select Name as the available network adapter of your machine. Image AVDF-121110-DF-20.png Network Adapter 2: · Select Network on the left pane. · Select "Adapter 2" tab · Select Enable Network Adapter on the right pane. · Select Attached to as "Bridged Adapter". · Select Name as the available network adapter of your machine. · Select Promiscuous Mode as "Allow All". Image AVDF-121110-DF-21.png Network Adapter 3: · Select Network on the left pane. · Select "Adapter 3" tab · Select Enable Network Adapter on the right pane. · Select Attached to as "Internal Network". · Select Name as the available network adapter of your machine. · Select Promiscuous Mode as "Allow All". · Click on "OK" button. Image AVDF-121110-DF-22.png 15. Start installation of Oracle Database Firewall Server. · Select Database Firewall Virtual Machine on the left pane. · Review the details of Virtual Machine on the right pane. · Click on Start button to start the installation. Image AVDF-121110-DF-23.png 16. Installation Main Screen · Type "install" and press "" to continue. Image AVDF-121110-DF-24.png 17. Installation in Progress Image AVDF-121110-DF-25.png 18. Applying Configuration · Wait until the installer goes to next screen. Image AVDF-121110-DF-26.png 19. Enter Installation Passphrase · Enter a strong passphrase. This passphrase will be used later to change other system passwords. It is recommended to note the password securely for future reference.