Oracle Audit Vault Reviews

Oracle Audit Vault has improved our compliance reporting.

Oracle Audit Vault has a lot of great features, but what I find most valuable is the database firewall. The assessment reports in version 19.10 are also incredibly useful for conducting security assessments and ensuring compliance with regulations.

Reports and alerts are most valuable to us. Management wanted complete traceability of non-DBAs accessing databases using a database power user account. With the help of Audit Vault custom alerts, we were able to control this with 100% compliance.

Some major improvements in organizational operations:

• Our organization has a complete alert and control mechanism to identify unauthorized access of PROD databases.
• Compliance with United States government security and audit standards.
• Proactive control of audited parameters, like failed log-on attempts, to avoid Denial of Service (DoS) attacks.
• Improved management awareness about database compliance metrics using Audit Vault.

Our primary use case is to filter the database traffic internally and to know who is doing what in the database and why they are doing it at any point in time.

Generally, security is enhanced and monitoring traffic and data became possible using this solution rather than others. You can audit and configure notifications so that you get notified when somebody accesses particular objects within the database. It's one of the key features. 

We are using Oracle Audit Vault for auditing and compliance reporting.

The most valuable feature of Oracle Audit Vault is that it is agentless and enhanced user interface.

Its main use case is for auditing the data.

It is deployed on-premises. You need two servers to do that. The first one is for Audit Vault, and the second one is for the firewall server.

Its security is most valuable. All companies are looking to secure their data because people around the world are stealing data from IT, banks, and other companies. The most important thing is to secure data. It should not go into the hands of hackers. A company's strength is in the security of its data, and customers want to know how safe the data is in a company.

It is a good product for controlling all databases. It is helpful for auditing the data. When people are doing any actions on the databases, they are recorded automatically in the vault. You can work on the collected data to find out exactly what is happening on a database. You can implement database encryption on the databases to control people's access to the database content, such as rows and tables.

I am currently using the latest version of Oracle Audit Vault for data security. It gives me the ability to see reports and other database details. Additionally, it also allows us to set policies. The privilege sector is an essential part of this solution and allows us to set up data visits without going back to check some other things.

It also has complementary solutions, allowing us to choose information selectively without keeping the administrator in the loop. It is a solution for databases that need to send very critical and vital information to audit reports for analysis. 

It has become an exchange-out part of the business itself. The new version comes with agentless capabilities. In my previous projects, I used agents that had to be installed on different databases that further needed to be monitored. Those features haven’t been released across all the regions, so they might not be available for use right now. All of the other components that make up the infrastructure in the environment including the operating system are also quite valuable. 

The following features of the product provide additional benefits for the user:

• If it's from an Oracle family, we can get quick support from Oracle support.
• Reporting screens are more useful, we can get many summary reports very quickly.
• Compared to previous versions, agent operation logic has been changed. The agent is now managed only, not collector + agent. This makes it easy.

• It has the added advantage of having a database firewall feature that is not in previous versions or other equivalent products.

Before this product was used in the company, the tables with some critical presets were checked with the triggers on them. The old and new versions of the changing records were written to another table. These triggers caused the database system to incur extra CPU and IO spending. It was also difficult to maintain and manage. We were also unable to provide a wide variety of reports that the audit department wanted.

By using the product, we could log the audit records, generate various reports, send these reports to the relevant administrators by attaching these reports to the mail, without exposing the main database system too much. In this way, it has contributed to accelerate the business processes of the company by providing audit trail requests much faster.

We use this solution for developing and hosting our environment to orient them.

There are features available in Imperva that are not included in Oracle Audit Vault. It would be helpful to have more features added.

Stability could be improved, we have had some challenges