5/9

# 2 Oracle Database Firewall Preinstallation Requirements

This chapter contains:

- Privileges Required to Perform the Installation

- Database Firewall and Management Server Hardware Requirements

- Analyzer Hardware Requirements

- Supported Database Versions

- Requirements for Using the Remote Monitor

- Supported Language and Character Sets

- Compatible Third-Party Products

## Privileges Required to Perform the Installation

Any trusted user can install Oracle Database Firewall. You do not need administrative privileges to complete the installation.

## Database Firewall and Management Server Hardware Requirements

You must install each Database Firewall and Management Server onto an Intel x86 server, which will be used solely for Oracle Database Firewall. The requirements for each are the same. Remember that the installation process re-images the computer, so do not use a computer that is used for other activities.

This section contains:

- Checking the Oracle Linux Version

- Checking the Memory Requirements

- Checking the Disk Space

- Checking the Network Interface Cards

### Checking the Oracle Linux Version

You must have Oracle Linux version 5.5 x86 DVD for the installation procedure. You can download Oracle Linux from the following Web site:

`https://edelivery.oracle.com/linux`

### Checking the Memory Requirements

Each Intel x86 server must have at minimum 1 GB of RAM. You can check the memory by running the following command:

    grep MemTotal /proc/meminfo

### Checking the Disk Space

Each Intel x86 server must have a single hard drive with a minimum 80 GB of disk space. You can check the disk space by running the following command:

    df -h

### Checking the Network Interface Cards

You must have a minimum of three ports for each Intel x86 server that you will use for Database Firewall and Management Server. One network interface card (NIC) with three ports is sufficient.

## Analyzer Hardware Requirements

You can install the Analyzer on Windows Vista or Windows XP.

## Supported Database Versions

These databases (also called the protected databases) are the databases that you will monitor using Oracle Database Firewall. Table 2-1 shows the database products supported for regular monitoring, as well as Direct Database Interrogation (DDI), User Role Auditing (URA), Stored Procedure Auditing (SPA), and Local Monitor.

Table 2-1 Supported Databases with Supported Database Firewall Features

Supported Database | Direct Database Interrogation | User Role Auditing | Stored Procedure Auditing | Local Monitor
--- | --- | --- | --- | ---
Oracle Database 8i |  |  |  |
Oracle Database 9i |  | Yes | Yes | Yes
Oracle Database 10g |  | Yes | Yes | Yes
Oracle Database 11g |  | Yes | Yes | Yes
Microsoft SQL Server 2000 |  | Yes | Yes |
Microsoft SQL Server 2005 | Yes | Yes | Yes | Yes
Microsoft SQL Server 2008 | Yes | Yes | Yes | Yes
Sybase Adaptive Server Enterprise (ASE) versions 12.5.4 to 15.0.x |  | Yes | Yes | Yes
Sybase SQL Anywhere version 10.0.1 | Yes | Yes | Yes |
IBM DB2 version 9.x (Linux, UNIX, Microsoft Windows) |  | Yes | Yes |

## Requirements for Using the Remote Monitor

If you want to use the remote monitor software, ensure that the servers that you plan to use meet the following requirements:

- You can use the remote monitor on the Linux, UNIX, AIX platforms.

- The same database platforms that Oracle Database Firewall supports, as described in "Supported Database Versions"

- The following utilities:

  - GNU Netcat networking utility, which you can download from the following Web site:

    `http://netcat.sourceforge.net/`

  - Tcpdump packet analyzer; see the following Web site for more information:

    `http://www.tcpdump.org/`

## Supported Language and Character Sets

Oracle Database Firewall and Database Firewall Analyzer are available in English only, but can support Unicode character sets.

## Compatible Third-Party Products

You can use Oracle Database Firewall with the following third-party products:

- HP ArcSight Security Information Event Management (SIEM), which logs, analyzes, and manages network user activity that is recorded in syslog messages from different sources

- F5 BIG-IP ASM (Application Security Manager) (versions 9.5.x and 10.x), which provides protection against Web-based attacks