Oracle Database Firewall Installation Manual

Architecture

How to install Oracle Database Firewall 12c

Version of Oracle Database Firewall to install: 12.2.0.10.0

Insert the Oracle Database Firewall ISO disk into the VM machine:

Select "Install (wipes system)":

ORACLE DATABASE FIREWALL INSTALLATION MANUAL GIPF
The Installation will start:

ORACLE DATABASE FIREWALL INSTALLATION MANUAL GIPF

ORACLE DATABASE FIREWALL INSTALLATION MANUAL GIPF
The installation will ask for the Installation Passphrase. Save this Passphrase because it will be
used later, if you lose this you will have re-install from scratch.

ORACLE DATABASE FIREWALL INSTALLATION MANUAL GIPF

ORACLE DATABASE FIREWALL INSTALLATION MANUAL GIPF
Select The network interface to use for Database Firewall Management Interface:

ORACLE DATABASE FIREWALL INSTALLATION MANUAL GIPF

Enter the IP for the selected Network Interface:

Database Firewall Server:

IP Address       : 10.224.177.139
Subnet Mask    : 255.255.255.0
Gateway          : 10.224.177.1

The server will reboot automatically:

The installation will continue automatically:

ORACLE DATABASE FIREWALL INSTALLATION MANUAL GIPF

When the installation is completed you will see the following screen:

Then you will be able to access the Oracle Database Firewall web console using the Installation
Passphrase:

ORACLE DATABASE FIREWALL INSTALLATION MANUAL GIPF

In the first Login you will be asked to enter the users and passwords for the administrator user,
and the OS users root and support.

Your session will be disconnected and you will have to connect again using the Administrator
that was created before:

ORACLE DATABASE FIREWALL INSTALLATION MANUAL GIPF

After that you will be able to access the Oracle Database Firewall web console:

Configure NTP Time Server settings

ORACLE DATABASE FIREWALL INSTALLATION MANUAL GIPF

Register an Oracle Database Firewall in Oracle Database Audit Vault
Version of Oracle Database Firewall: 12.2.0.10.0
Version of Oracle Audit Vault: 12.2.0.10.0

Registering the Oracle Audit Vault Server in the new Oracle Database Firewall

Login to Oracle Database Vault

Click in “Settings” menu
Click in “Server Certificate”
Copy the Certificate

Login into Oracle Database Firewall

Click in “System”
And then click in “Audit Vault Server”

ORACLE DATABASE FIREWALL INSTALLATION MANUAL GIPF

Enter the IP of the Audit Vault Server
Enter the Certificate that was copied from Audit Vault Server

Click in “Apply” button

ORACLE DATABASE FIREWALL INSTALLATION MANUAL GIPF

Registering the new Oracle Database Firewall into the Oracle Audit Server

Login into Oracle Audit Server

Click in “Database Firewalls” menu, then “Database Firewalls” and click in “Register” Button

Registering Oracle Database Firewall in Oracle Audit Server

Login in to Oracle Audit Vault Server web console.

Click in "Database Firewalls" -> "Settings"

ORACLE DATABASE FIREWALL INSTALLATION MANUAL GIPF

Verify the Database Firewall was registered successfully:

ORACLE DATABASE FIREWALL INSTALLATION MANUAL GIPF

Configuring Network Interfaces for Proxy in Oracle Database Firewall

Login in to Oracle Database Firewall web console.

Click in "System"-> "Network Configuration"
Click in "Change" button

In this Oracle Database Firewall there are 3 network interfaces connected. The first one is used
for "Management", in the other two are not used, that's why we see two unallocated network
interfaces.

Under "Unallocated Network Interfaces" click in "Device"

For the first interface select "Traffic Proxy" and Click in "Add" Button.

Configuring the Proxy network interface:

Input a correct IP Address (A default is generated randonmly)

Check "Enabled" Under "Proxy 0"
Specify a port for the new Proxy and check "Enabled"

ORACLE DATABASE FIREWALL INSTALLATION MANUAL GIPF

Click in "Add" button under "Traffic Proxies" -> "Proxy 0" -> "Proxy Ports"
Click in "Save" Button

ORACLE DATABASE FIREWALL INSTALLATION MANUAL GIPF