<div id="docs-body">
 <div class="section">
  <div class="titlepage">
   <div>
    <div>
     <h3 class="title">
      <a name="firewall">
      </a>
      8.4.7 MySQL Enterprise Firewall
     </h3>
    </div>
   </div>
  </div>
  <div class="toc">
   <dl class="toc">
    <dt>
     <span class="section">
      <a href="firewall-elements.html">
       8.4.7.1 Elements of MySQL Enterprise Firewall
      </a>
     </span>
    </dt>
    <dt>
     <span class="section">
      <a href="firewall-installation.html">
       8.4.7.2 Installing or Uninstalling MySQL Enterprise Firewall
      </a>
     </span>
    </dt>
    <dt>
     <span class="section">
      <a href="firewall-usage.html">
       8.4.7.3 Using MySQL Enterprise Firewall
      </a>
     </span>
    </dt>
    <dt>
     <span class="section">
      <a href="firewall-reference.html">
       8.4.7.4 MySQL Enterprise Firewall Reference
      </a>
     </span>
    </dt>
   </dl>
  </div>
  <a class="indexterm" name="idm46045234626944">
  </a>
  <a class="indexterm" name="idm46045234625888">
  </a>
  <div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
   <div class="admon-title">
    Note
   </div>
   <p>
    MySQL Enterprise Firewall is an extension included in MySQL Enterprise Edition, a commercial product.
        To learn more about commercial products, see
    <a class="ulink" href="https://www.mysql.com/products/" target="_blank">
     https://www.mysql.com/products/
    </a>
    .
   </p>
  </div>
  <p>
   MySQL Enterprise Edition includes MySQL Enterprise Firewall, an application-level firewall that enables
      database administrators to permit or deny SQL statement execution
      based on matching against lists of accepted statement patterns.
      This helps harden MySQL Server against attacks such as SQL
      injection or attempts to exploit applications by using them
      outside of their legitimate query workload characteristics.
  </p>
  <a class="indexterm" name="idm46045234622000">
  </a>
  <a class="indexterm" name="idm46045234620928">
  </a>
  <p>
   Each MySQL account registered with the firewall has its own
      statement allowlist, enabling protection to be tailored per
      account. For a given account, the firewall can operate in
      recording, protecting, or detecting mode, for training in the
      accepted statement patterns, active protection against
      unacceptable statements, or passive detection of unacceptable
      statements. The diagram illustrates how the firewall processes
      incoming statements in each mode.
  </p>
  <div class="figure">
   <a name="firewall-diagram">
   </a>
   <p class="title">
    <b>
     Figure 8.1 MySQL Enterprise Firewall Operation
    </b>
   </p>
   <div class="figure-contents">
    <div class="mediaobject">
     <img alt="Flow chart showing how MySQL Enterprise Firewall processes incoming SQL statements in recording, protecting, and detecting modes." src="images/firewall-diagram-1.png" style="width: 100%; max-width: 632px;"/>
    </div>
   </div>
  </div>
  <br class="figure-break"/>
  <p>
   The following sections describe the elements of MySQL Enterprise Firewall, discuss
      how to install and use it, and provide reference information for
      its elements.
  </p>
 </div>
 <br/>
</div>
