How To Use Database Vault Rules To Filter The Incoming IP Accesses With a 'BETWEEN' Range
(Doc ID 1930754.1)
Last updated on OCTOBER 10, 2022
Applies to:
Oracle Database - Enterprise Edition - Version 11.2.0.3 and laterOracle Database Cloud Schema Service - Version N/A and later
Oracle Database Exadata Express Cloud Service - Version N/A and later
Oracle Database Exadata Cloud Machine - Version N/A and later
Oracle Cloud Infrastructure - Database Service - Version N/A and later
Information in this document applies to any platform.
Goal
If you need to restrict (or allow) a certain range of IP addresses using BETWEEN, beware the order in which character strings are ordered do not follow that of IP addresses as you may expect for example:
After we apply the rule which has the expression DVF.F$CLIENT_IP BETWEEN ''10.100.111.1'' AND ''10.100.111.10'' *), the sessions from the specified ip are still not able to connect to the db. However the expression "between and" is also been used in other ip address, and it works.
*) In the example the IP address range was changed to a non-routable address range.
Solution
To view full details, sign in with your My Oracle Support account. |
|
Don't have a My Oracle Support account? Click to get started! |
In this Document
| Goal |
| Solution |
| References |