By

Oracle Audit Vault – 20.4 – Part 1 – Installation

In this article we will cover the audit vault installation and issues
encountered while performing the installation.


Intro

Database security is in greater demand sector in current data era. All the
companies spending colossal sum of money to enhance the security of the
database servers. Oracle came up with Oracle Audit vault and Firewall to
protect and prevent data from internal and external attackers. 
It’s important to get an understanding of the what is Database Audit Vault
and Database firewall ?
What is DB Audit vault ?

Oracle Audit Vault and Database Firewall
(AVDF) is a complete Database Activity Monitoring (DAM) solution that
combines native audit data with network-based SQL traffic capture. … A
Quick-JSON collector simplifies ingesting audit data from databases like
MongoDB.

What is Database firewall ?

Oracle Database
Firewall acts as the first line of defense for databases, helping prevent
internal and external attacks from reaching the database. Highly accurate
SQL grammar-based technology monitors and blocks unauthorized SQL traffic on
the network before it reaches the database.


NOTE :

The Audit Vault Server and Database Firewall server are software
appliances. You must not make any changes to the Linux operating system
through the command line on these servers unless following official
Oracle documentation or under guidance from Oracle Support.

Make sure to full fill these pre requisites before starting the
installation.

In this scenario we are going to install this on
virtual box.

1 . Pre-requisites

1.1 VM creation

  • 8GB – Memory
  • 250GB – HDD
  • 1 core cpu.

1.2 network settings.

Make sure to note vm-network address range and default gateway
because we need this to setup vm network and access this using url.

1.3 Download the image

We can download the iso image from :https://edelivery.oracle.com/

Then search for : Oracle Audit Vault and Database Firewall .

In this case we are going to download Audit Vault and Database 20.4.

This comes with two separate iso images , 

1.  audit vault 
2.  firewall.

2. Installation

First we need to create a vm with 8gb memory , 250GB hard disk and 1 core.
After that browse the iso to controller IDE . This is pre-setup
installation media consists with database and application installation.

Mount iso file:

Then it will automatically mount the iso image and start booting
from the iso image.


2.1 Installation Issues : HDD Capacity

We faced a issue when trying to give less capacity for hdd.

Error:

Solution:

Increase the hdd size 250 or more.

2.2 Installation issues : Lack of memory

If you tried to install this only with 4GB of memory Installation will
failed with below mention error, so make sure to give 8GB to avoid this
failure.

2.3 Setup root account password

We have taken few screen shots of the installation get the understanding
of the installation components.
First screen shot shows the disk partitioning . Second screen shot shows
the installation of the requirement rpms.

After this step , setup will move to root password configuration.

Now installation will again prompt the iso to continue with other steps.
Again browse the same iso image from controller ide.



2.4 Setup network

I have added two network interfaces here , Network settings information (Chapter 1 – Pre-requites ) is required to setup the network.

1. NAT network to access internet.
2. Vm-host network to access vm via same network range 192.168.56.1.

Feed network information:

On completion of the network setup , installation will move to asm and db installation

Once the repository creation is done setup will apply the GRID RU

2.5 Setup Application.

Last two steps of the installation illustrates the application installation and migrating the created repository to asm storage.

Congratulation now installation is complete !!!!!!!!

you
can access the web application from below mention url.

3. Web Application Access

Initial access needs root credentials . After that we need to setup
several users to segregate the accounts.

This oracle document link will covers the setup of these accounts for
segregation of duties.


 3.4 Setting the Usernames and Passwords of Audit Vault Server
Users 

(taken from oracle documents)

Set up usernames and
passwords for Oracle Audit Vault and Database Firewall (Oracle AVDF).

In
the post-install configuration page, you set up usernames and passwords
for the following Oracle Audit Vault and Database Firewall users:

  • Super Administrator
  • Super Auditor
  • Repository Encryption Keystore
  • Support
  • Root

Changing the root user password on this screen is optional as it is
already set during installation.

Password requirements:

If your password contains Unicode character (such as non-English characters with accent marks), the password requirement is as follow: “between 8 and 30 characters long…etc”

  • Be between 8 and 30 characters long.

If you are using English-only, ASCII printable characters, Oracle Audit
Vault and Database Firewall require that passwords:

  • Be between 8 and 30 characters long.
  • Contain at least one of each of the following:
  • Lowercase letters: a-z
  • Uppercase letters: A-Z
  • Digits: 0-9

Punctuation marks: comma (,), period (.), plus sign (+), colon (:),
exclamation mark (!), and underscore (_)

Console output: