How to Register the Database firewall on AVDF GUI console?

by sys_oracleon Posted on

We have to Register the Database firewall on AVDF GUI console, once we installed the Firewall server using How to install Oracle Database Firewall 20.x?

Use this procedure to register an Database Firewall with the Audit Vault Server.

Step-1 Log in to the Audit Vault Server console as an administrator

Apologies:- Snaps are blur due to security reasons.

Step-2 Click Settings tab –> then Click on Security tab in the left navigation menu.

Apologies:- Snaps are blur due to security reasons.

Step-3 Click on Certificate tab in the main page, and click on Server Certificate sub tab.

Apologies:- Snaps are blur due to security reasons.

Step-4 The server’s certificate is displayed then  Copy the server’s certificate.

Important: - Copy the certificate from Audit Vault server to Database Firewall server – create a file ca.crt on Audit Vault Server and scp to Database Firewall server as the support OS user

Step-5 Connect to the Audit Vault server through SSH

Step-5 Check the certificate again as below

Step-6 Copy the certificate from Audit Vault server to Database Firewall server – create a file ca.crt on Audit Vault Server and scp to Database Firewall server as the support OS user

Step-7 Connect to the Database Firewall server through SSH

Apologies:- Snaps are blur due to security reasons.

Step-8 Connect as root user on Database Firewall server and execute the config-avs script providing the IP address of the Audit Vault server and the location of the certificate file copied from the Audit Vault server

Step-9 From root user Run these commands to associate the primary or secondary Audit Vault Server for the Database Firewall:

To display the Audit Vault Servers paired with the Database Firewall

/opt/avdf/config-utils/bin/config-avs show

To add or update the primary Audit Vault Server for the Database Firewall

/opt/avdf/config-utils/bin/config-avs set avs=primary address=<Ip address of the primary AVS> certificate=<Path of the certificate>

Step-10 Check the certificate now on the DBFW server as below

Apologies:- Snaps are blur due to security reasons.

Step-11 Login to the Audit Vault Console using ADMIN user as below snap

Step-12 Click on database Firewall tab as marked as blue color

Apologies:- Snaps are blur due to security reasons.

Step-13 Click on Register and Enter the IP address of the Database Firewall server

Step-14 Firewall server has been registered on AVDF console and Below is the status

Next -> Configure/Add the Target Databases on AVDF to monitor?

Configure the AVDF with below related articles: –

Caution: It is provided for educational purposes only. It has been tested internally, however, we do not guarantee that it will work for you. Ensure that you run it in your test environment before using.

Thank you,
A. Rawat
Email: 88arawat@gmail.com