Personal tools
You are here: Home → Products → AppSentry → Oracle Application Server → Checks and Audits
Navigation
 

Checks and Audits

AppSentry for the Oracle Application Server
Introduction Features Checks & Audits pdf Overview pdf Datasheet

AppSentry performs over 300 security audits and checks against the Oracle, Database, Oracle Application Server, and Oracle E-Business Suite. All technology components – operating system, web server, application server, and database – are analyzed as well as the application. The audits and checks are internal and external; some are performed through penetration testing while others are performed by accessing the file-system, database, and application.

Here is a sample of a few of the 300+ checks AppSentry performs -

Operating System
Standard Oracle accounts
UNIX and Windows security patches

Web Server
Apache configuration (http.conf)
Apache logging (http.log)
Apache virtual directories
Apache and JServ security patches
SSL configuration
Oracle support cgi-bin scripts
PLSQL Cartridge exploits

Application Server
Forms and reports security patches
SSL configuration

Database
Database accounts
Listener exploits
Database auditing (SYS.AUD$)
Database security patches
APPS permissions
APPLSYSPUB permissions
Database links

Oracle E-Business Suite
Application accounts
Users with Sysadmin responsibility
Application’s security patches
Application auditing
Password related profile options