Rules define what types of statements are allowed to run on the DBMS, which types are forbidden, and which types should be monitored. The monitoring policy for a DBMS comprises the various rules enabled and applied on that DBMS. Database Security provides enhanced DBMS security based on both predefined vPatch rules and custom rules.
Database Security also enables Database Activity Monitoring users to apply compliance rules.
DBMSs are manipulated by SQL statements and queries on an ongoing basis. Incoming statements are compared to the rules enabled for the DBMS and action is taken based on the first rule that is matched. If a statement does not match any of the existing rules, the statement is allowed.
Database Security provides enhanced DBMS security based on vPatch rules and custom rules. vPatch rules are included in the installation of the Database Activity Monitoring version and help prevent attacks against known vulnerabilities. In addition, you can define custom rules to define the level of monitoring and alerts, and further protect your DBMSs against potential threats. For example, custom rules can be used to limit access to specific tables in the DBMS, or to limit access to the DBMS by specific users or at specific times of day.
Rules are defined and are enabled for one or more DBMS. Rules for each DBMS are managed in the various tabs of the DBMS properties page. vPatch rules are listed on the vPatch Rules tab of the DBMS properties page.
vPatch rules address known attacks and therefore should not be overruled by custom rules. You can disable all vPatch rules or specific rules if the need arises, for example, for false positives where exceptions are unable to resolve the issue.