Audit Vault on VMware

Can Audit Vault be installed on VMware?
Any information would be greatly appreciated.
Thanks and regards
Sonali

Can it be done? Probably yes.
Is it fully supported? No. Check the support matrix at metalink.
Does it make any sense given the reason why might wish to create a secure and stable AV environment. No yet again.
AV is not a word processor or a browser. If your audit trail is worth collecting and keeping surely you can afford a few thousand dollars for a real server with a real operating system such as OEL.

Similar Messages

Audit Vault Demo

Are you aware of an Audit Vault Demo...
A vmware image or something like that?
Would it be possible to setup a db, the audit server and the audit agent all in a single machine (or vmware image) mainly for purposes of checking out Audit Vault features?

Yeah you can defenitly create all the three components in the same VMware.
The audit vault server is nothing but a respository Database.

Audit Vault Installation problem on windows platform

Hello!
I'm trying to install Audit Vault 10.2.2 on windows platform. The installation procedure is successfull (there are no alerts about errors during installation). The enterprise manager is working at http://localhost:1158/em without any problem.
The installation guide says that audit vault console should work at http://localhost:5700/av, but this site is unreachable.
I tried to find out the problem, so I started avctl show_av_status
The result is:
Exception in thread "main" java.lang.Exception: Invalid Oracle JDBC url
at oracle.av.avca.Commandarguments.setOracleProperties (Commandarguments.java:281)
at oracle.av.avca.Commandarguments.processArguments(CommandArguments.java:667)
at oracle.av.avca.Avctl.startCTL(Avctl.java:70)
at oracle.av.avca.Avctl.main(Avctl.java:318)
(avctl start_av results the same problem)
Could you help me to solve this problem? Please!

I'd like to help you but it seems to me, from the perspective of the purpose of Audit Vault, that putting a secure repository on top of an insecure operating system is a non sequitur.
Thus all of my installs have been on Oracle Enterprise Linux and I've never seen any installation-related issues such as you are reporting.
If you can I would suggest getting, as they say, "a real operating system."
Performance will improve, hardware utilization will improve, security will improve, and as an additional advantage, this issue will disappear.

Error while trying to start Audit Collector on the Audit Vault Server 10g

Hi,
We are trying to build a demo environment for testing Oracle Audit Vault 10g but we are having some trouble.
Our environment is like this: Oracle Audit Vault Server is installed on Windows Server 2003 SP2, while the Audit Vault Agent is installed on an Oracle 10g Release 2 database which resided on Windows server 2003 SP1. This two Windows Server machines are both installed as virtual machines.
We have successfully created the Agent and the Collector on Audit Vault Server and the Agent starts successfully while when we try to start the collector we get an error which says " Http Communication error: Http Communication error: 500" and the collector does not start.
We are new to the Audit Vault Software so we would really appreciate some help on how to resolve this issue because we have got stuck here and can not go on with our work.
Thanks in advance for your time
Best regards
Engrid

Hi,
Thanks again for all of your replies but now we are getting another error with the OSAUD collector. We are able to add the collector successfully by using the avorcldb all_collector command.
Source database is 10g R2 (10.2.1) and we configured it for collecting the audit records in the OS audit trail by using the following statement: ALTER SYSTEM SET AUDIT_TRAIL=OS SCOPE=SPFILE;, and the SHOW PARAMETER AUDIT command returns the following values :
NAME TYPE VALUE
audit_file_dest string C:\ORACLE\PRODUCT\10.2.0\ADMIN
\<db_name>\ADUMP
audit_sys_operations boolean TRUE
audit_trail string OS
We don't know if the values set for the audit_file_dest is correct but after we start working on the database and execute some statements Oracle is not creating any files on this destinations while for the same statements when the Audit_trail=DB, EXTENDED the audit values for these statements are written in the appropriate table.
So we do not know if this is the cause but when we try to start the OSAUD collector defined on the Audit Vault Server it can not start and gives us the follwing error: "could not start collector OSAUD_Collector for source <source name>, directory access error for C:\ORACLE\PRODUCT\10.2.0\ADMIN\<db_name>\ADUMP".
Sorry for the message being so long but we really need some help with this issue.
thanks in advance.
Engrid

Can i use Oracle Database Audit Vault and Oracle Database Firewall on Solaris?

Can i use Oracle Database Audit Vault and Oracle Database Firewall on Solaris?

4195bee8-4db0-4799-a674-18f89aa500cb wrote:
i dont have access to My Oracle Support can u send text or html of document please?
Moderator Action:
No they cannot send you a document that is available only to those with access to MOS.
That would violate the conditions of having such service contract credentials.
Asking someone to violate such privileges is a serious offense and could get that other person's organization banned from all support and all their support contracts cancelled.
Your post is locked.
Your duplicate post that you placed into the Audit Vault forum space has been removed (it had no responses).
This thread which you had placed in the Solaris 10 forum space is moved to the Audit Vault forum space.
That's the proper location for Audit Vault questions.

Failing 10.2.3.2 audit vault patch on AV Agent at AV Configuation Assistant

Hi,
Applying 10.2.3.2 audit vault patch on top of 10.2.3.0 Audit Vault Agent. Getting following error after 100% installation at the time of Audit Vault Configuation Assistant Components
Information from Installxxxxxx.log
OPatch succeeded.
INFO: Configuration assistant "Oracle Audit Vault Agent One-Off Patches" succeeded
INFO: Command = oracle.av.common.AvcaCfgPlugIn /oracle/app/oracle/product/10.2.3/av_1/bin/avca -s initialize_agent -agentname agent_hmrac2 -agentusr ${s_agentusr} -agentport 7016 -av HMCSPV0921.HIGHMARK.INTRA:1522:av.HIGHMARK.INTRA -rmiport 3121 -jmsport 3300
INFO: Configuration assistant "Oracle Audit Vault Configuration Assistant" succeeded
INFO: All the tools have been executed Successfully
INFO: The "/oracle/app/oracle/product/10.2.3/av_1/cfgtoollogs/configToolAllCommands" script contains all commands to be executed by the configuration assistants. This file may be used to run the configuration assistants outside of OUI. Note that you may have to update this script with passwords (if any) before executing the same.
WARNING:
The following configuration scripts need to be executed as the "root" user.
#!/bin/sh
#Root script to run
/oracle/app/oracle/product/10.2.3/av_1/root.sh
To execute the configuration scripts:
1. Open a terminal window
2. Log in as "root"
3. Run the scripts
4. Return to this window and click "OK" to continue
INFO:
*** End of Installation Page***
The installation of Oracle Audit Vault Agent 10g was successful.
WARNING: Do you really want to exit?
INFO: User Selected: Yes/OK
INFO: The OUICA command is launched from /oracle/app/oracle/product/10.2.3/av_1/oui/bin/ouica.sh.
Executed *"/oracle/app/oracle/product/10.2.3/av_1/cfgtoollogs/configToolAllCommands* which has following command and successful.
[oracle@HMCSPS02 oui]$ cat "/oracle/app/oracle/product/10.2.3/av_1/cfgtoollogs/configToolAllCommands"
# Copyright (c) 1999, 2009, Oracle. All rights reserved.
/oracle/app/oracle/product/10.2.3/av_1/bin/avca apply_patchset
[oracle@HMCSPS02 oui]$ echo $ORACLE_HOME
/oracle/app/oracle/product/10.2.3/av_1
[oracle@HMCSPS02 oui]$ sh /oracle/app/oracle/product/10.2.3/av_1/bin/avca apply_patchset
Deploying to standalone OC4J...
Restarting agent ...
Agent restarted successfully.
Retried component but again failed. Hence executed root.sh and clicked 'Next' button. then message got like 'Agent 10.2.3.2 Installation was successful but some of the components missing,skipped or cancelled which may be functioning properly.
has my patch upgrade to client was successful or what is the workaround ???
Any help on this would be appreciated...
Regards,
Manish

Sorry, it was my mistake.
Actually while upgradation to 10.2.3.2, my ORACLE_HOME was not set to AV Agent HOME (instead it was set for AV Server HOME). That is why at the end script was unable to run from respective HOME.
Conclusion: Make sure to set ORACLE_HOME to AV Agent HOME before applying to 10.2.3.2 patchset to AV Agent. (also Valid for all Oracle Patchset Installation)
thanks for your support and reply.
Regards,
Manish

Oracle Audit Vault installation fails on DVCA assistant + libpthread.so.0

Hello experts, I did this post at general forums but nobody noticed anything, I need your help
I am able to install the Oracle Audit Vault Server on the following features:
OS: Suse Linux 10 SP 2
Clusterware version: 11.1.0 6
The Oracle Audit Vault server installation procces creates the database an starts the instances on each node and notice me the url for the Enterprise Manager but after that it fails at DVCA assistante because is not able to load the shared library libpthread.so.0.
I found in internet that some time there are files like srvctl, vipca, etc tha export LD_ASSUME_KERNEL ant we have to comment that line, but I do not found the line in those files. I just found in the crsctl file this line like
LD_ASSUME_KERNEL=
export LD_ASSUME_KERNEL
PD: The libpthread.so.0 library already exist
Should I comment this line at crsctl file?
Thank you in advance.

Here you are the error messages:
Is the Oracle Audit Vault server 10.2.3
Command = /opt/oracle/product/av/bin/dvca -action option -oh
/opt/oracle/product/av -s_path /opt/oracle/oradata/ -logfile
/opt/oracle/product/av/cfgtoollogs/dvca_install.log -owner_account vault
-owner_passwd ${s_ownerEncryptPwd} -acctmgr_account vault1 ${s_dvMgrPwdArg}
-jdbc_str jdbc:oracle:oci:@av1 ${s_sysPasswdArg} -languages {"en"} -racnode
seguridad1.min2.dtc -lockout
MANAGE_LISTENER start listener
MANAGE_LISTENER start listener
result=/opt/oracle/product/av/bin/dvca_start_listener.sh,127,/opt/oracle/product/av/jdk/jre/bin/java:
error while loading shared libraries: libpthread.so.0: cannot open shared
object file: No such file or directory
MANAGE_LISTENER start listener log=
MANAGE_INSTANCE start RDBMS
MANAGE_INSTANCE start RDBMS
result=/opt/oracle/product/av/bin/dvca_start_rdbms.sh,127,/opt/oracle/product/av/jdk/jre/bin/java:
error while loading shared libraries: libpthread.so.0: cannot open shared
object file: No such file or directory
MANAGE_INSTANCE start RDBMS log=
Executing task SQLPLUS_CATOLS
Executing task RESTART_SERVICES_OLS
MANAGE_INSTANCE stop isqlplus
MANAGE_INSTANCE stop OC4J
MANAGE_LISTENER start listener
MANAGE_LISTENER start listener
result=/opt/oracle/product/av/bin/dvca_start_listener.sh,127,/opt/oracle/product/av/jdk/jre/bin/java:
error while loading shared libraries: libpthread.so.0: cannot open shared
object file: No such file or directory
MANAGE_LISTENER start listener log=
MANAGE_INSTANCE start RDBMS
MANAGE_INSTANCE start RDBMS
result=/opt/oracle/product/av/bin/dvca_start_rdbms.sh,127,/opt/oracle/product/av/jdk/jre/bin/java:
error while loading shared libraries: libpthread.so.0: cannot open shared
object file: No such file or directory
MANAGE_INSTANCE start RDBMS log=
Executing task SQLPLUS_CATMAC
connect SYS:java.sql.SQLException: ORA-01034: ORACLE not available
Questions:
Is the Audit Vault Server Installation compatible with CRS version 11.1.0.6

Audit Vault and DB Firewall Design

I have and application (JAVA Based) connected to the database 11g using JDBC,
I am going to implement Audit Vault and DB firewall R12 for three reasons:
1. monitoring the traffic
2. blocking un wanted SQL statements.
3. blocking un wanted IPs/Users
Our two Physcial servers that will be used for Audit Vault and DB Firewalls contain two NIC each.
My Questions:
1. How to put these two servers in our network to be able to mointor as well block traffic, we don't need to change anything to our exisiting network configuration.
2. How to DB Firewall will block unwanted incomming traffic from the JAVA application to our database.
please any usefull documents, links, ideas, network design
I tried official Oracle Document, it is useless

hi,
1. if you plan to block sql using the firewall you will need 3 NICs in the firewall appliance since apart from the management interface you will need to setup a bridge (with 2 NICs) to physically route the traffic through the firewall, this also requires you to patch the appliance properly inside your datacenter between the protected database and the client or middle tier servers, so you can't do this w/o changing anything in your nw configuration.
2. you will need to compile a whitelist based on what your trusted applications are doing normally, this is an iterative process, then the firewall will be able to block sql not in the whitelist (replace it with something like select 1 from dual), since the only physical network path from the java clients to the secured target db goes via the bridge
Comment: so if you have a chance: pull one NIC out of the AV server (it only needs 1) and plug it into the firewall appliance.
greetings,
Harm ten Napel

Oracle Database Vault vs Audit Vault and database firewall

Hi All,
I would like to know the main difference between Oracle Database Vault and Oracle Audit Vault and Database firewall.
I have read all the white papers and documents on them both and find them very similar in work process.
Only difference I see in the pricing.
I feel Oracle audit Vault can do all the work of Database Vault with added feature of proactive session monitoring.
If someone can help me based on their knowledge and experience it would be appreciated.
Thank you.

I have read the white papers of both Database Vault and Audit Vault
According to database Vault sessions can be managed using various roles created as per business requirements.
Audit vault offers same thing in terms of a firewall which manages and restrictions based on roles created .
From the white papers:
DATABAES VAULT:
Oracle Database Vault restricts access to specific areas in an Oracle database from any user, including users who have administrative access.
This enables you to apply fine_grained access control to your sensitive data in a variety of ways.
Oracle Database Vault enables you to create the following components to manage security for your database:
Realms
Command Rules
Factors
Rule Sets.
DATABAE AUDIT AND FIREWALL:
Oracle Audit Vault and database Firewall consolidates database activity monitoring events and audit logs. Policies enforce expected application behaviour, helping preventing SQL injection, application bypass, and other malicious activities from reaching the database while also monitoring and auditing privileged users and other activities inside the database.
To me these sound very similar of doing same work.
My apologies as I am unable to paste the whole text here and I cannot type full documents here

How to install Oracle Database Audit Vault

Hi all,
i have my database in oracle 10g in linux environment, i wont to install oracle database audit vault 10.2.3 in linux
can any 1 let me know how to install it or what or the steps required.
any usefull link would be helpfull
Thanks....

Hi,
Please check : How to install Oracle Database Audit Vault - Yahoo Video Search Results
Thank you

Oracle Audit Vault and Database Firewall implementaion

Dear All,
we are planning to implement Oracle Audit Vault and Database Firewall on 2 node 11g RAC/solaris10, please advise me to ahead in details
Thanks

Recently purchased Audit Vault and Database Firewall
My question is with Audit Vault.
All of the documentation says that i need Oracle Linux 5.8 as part of the installation. We do not have any servers now that support 5.8 currently. When I check the HCL for Oracle Linux 5.8 i see only 4 Oracle servers that support this version
Sun Server X2-4
Sun Server X2-8
Sunfire X2270 M2
Sunfire X4470
The only two servers that are currently offer for purchase by Oracle are the X2-4 and X2-8 which are way overkill both in power and price for this application.
The X2270 M2 would fit nicely, but is no longer offered for sale. In it place is the X3-2 which would fit nicely, but it listed as supporting Oracle Linux 5.8. Oracle Linux 5.9 is supported on the X3-2.
My question is will Oracle Linux 5.9 or newer install to support Audit Vault? The documentation specifies Linux 5.8. Is this flexible or not?
Thanks,

Oracle Audit Vault and Database Firewall X SAP

Hello,
Someone has or had any experience on implementing "Oracle Audit Vault and Database Firewall" in a SAP environment?
I would like to know the impacts of this implementation for SAP System.
Is there anything we have to concern about it from SAP side?
Regards,
Richard Brehmer

Well,
In case of someone needs it.
I found something in Note: 105047
https://websmp230.sap-ag.de/sap(bD1wdCZjPTAwMQ==)/bc/bsp/sno/ui_entry/entry.htm?param=69765F6D6F64653D3030312669765F7361…

Oracle Audit Vault and Database Firewall 12c Available for Download

Oracle Audit Vault and Database Firewall 12c software is now available for download at http://edelivery.oracle.com

Dear Zoran Pavlovic,
Yes is it, but I can't download because of my country.
So do you have other link?
ERROR:
Thank you for accessing the Oracle Software Delivery Cloud. Due to your country location, we are unable to process your request. If you have an active support contract, you may request physical media by either submitting a Service Request or calling Customer Support. If you wish to purchase or evaluate our products on a 30-day trial please contact the appropriate Sales Representative for your country.
Best Regards,
Kosal

Oracle Audit Vault Server & Agent Installation Error.

Hi,
I am new to Audit vault. When I install Audit Vault on Windows 2008 R2 it throws an error after installing 99%. Kindly help me to resolve.
OS Version : Windows 2008 R2
Oracle Audit Vault Version: 10.2.3.2
Error:
Audit Vault Server:
INFO: Configuration assistant "Oracle Audit Vault Configuration Assistant" failed
*** Starting OUICA ***
Oracle Home set to C:\oracle\product\10.2.3\av_1
Configuration directory is set to C:\oracle\product\10.2.3\av_1\cfgtoollogs. All xml files under the directory will be processed
INFO: The "C:\oracle\product\10.2.3\av_1\cfgtoollogs\configToolFailedCommands" script contains all commands that failed, were skipped or were cancelled. This file may be used to run these configuration assistants outside of OUI. Note that you may have to update this script with passwords (if any) before executing the same.
INFO: Created a new file C:\oracle\product\10.2.3\av_1\cfgtoollogs\configToolFailedCommands
INFO: Since the option is to overwrite the existing C:\oracle\product\10.2.3\av_1\cfgtoollogs\configToolFailedCommands file, backing it up
INFO: The backed up file name is C:\oracle\product\10.2.3\av_1\cfgtoollogs\configToolFailedCommands.bak
SEVERE: OUI-25031:Some of the configuration assistants failed. It is strongly recommended that you retry the configuration assistants at this time. Not successfully running any "Recommended" assistants means your system will not be correctly configured.
1. Check the Details panel on the Configuration Assistant Screen to see the errors resulting in the failures.
2. Fix the errors causing these failures.
3. Select the failed assistants and click the 'Retry' button to retry them.
xception: VariableNotFoundException
Query Exception Class: class oracle.sysman.oii.oiil.OiilQu
Also while installing Collection agent, it throws the error while executing runInstaller.
OS Version : AIX 6.1
Oracle Audit Vault Agent Version: 10.2.3.2
Audit Agent:
bash-3.2$ ./runInstaller
Starting Oracle Universal Installer...
Checking installer requirements...
Checking operating system version: must be 5200 or 5300
Failed <<<<
Exiting Oracle Universal Installer, log for this session can be found at /tmp/OraInstall2011-05-12_05-11-03PM/installActions2011-05-12_05-11-03PM.log
*/tmp/OraInstall2011-05-12_05-15-39PM>*cat installActions2011-05-12_05-15-39PM.log
Using paramFile: /finacle/avagent/aix_5l64/install/oraparam.ini
Checking installer requirements...
Checking operating system version: must be 5200 or 5300
Failed <<<<
Exiting Oracle Universal Installer, log for this session can be found at /tmp/OraInstall2011-05-12_05-15-39PM/installActions2011-05-12_05-15-39PM.log
Thanks & Regards,
Mithra.
Edited by: 864048 on Jun 7, 2011 2:57 AM

Hi ,
Please try the following:
Execute the setup in cmd with -ignoreSysPrereqs option.
Thank you.

REG:Oracle Audit Vault Agent Installation fails at the last step .

Hi ,
I am installing Audit vault agent 10.3 and it is failing at the last on solarisis 10 sparc 64 bit .
The error is
OUI-25031:Some of the configuration assistants failed/cancelled. It is strongly recommended that you retry the configuration assistants at this time. Not successfully running any "Recommended" assistants means your system will not be correctly configured.
I have tried the Doc ID 1058184.1 but it fails at the end saying cannot update av.properties , If we create the the directories manually and create the av.properties file then the agent will start but it is not stopping until you kill the agent .
Moreover if i am continuing with this agent after registering the collectors i am not able to start them as i am facing the http 404 error .
So i think i need to install the audit agent successfully first .
can anybody help me please as we are on client side and it is critical deliverable .
Regards
Edited by: 836778 on May 1, 2012 4:52 PM
Edited by: 836778 on May 1, 2012 4:59 PM

In case you're still dealing with this issue:
I hit this problem when the OS user I was installing with was not in the proper OS group. I don't have the documentation in front of me right now, but make sure your user is in the DBA and/or OINSTALL group.

Audit Vault on VMware

Similar Messages

Maybe you are looking for