If you were talking to someone whose organization is considering Oracle Audit Vault, what would you say?
How would you rate it and why? Any other tips or advice?
Anyone can go to with Oracle Audit Vault, but be sure you know what is going on to be comfortable with it. On a scale from one to ten, I would rate this product at 8.5. Some of the database functionality is not too good.
I use this solution once or twice per month. I would rate this solution an eight out of ten.
If you are with Oracle completely and you do not have a mix of databases then this is a great solution. However, if you have a solution that includes a mix of databases then it has a lot of limitations. The advantage of going with Oracle Audit Vault comes from its integration with data encryption, masking, and all of the Oracle security technologies. Overall, this solution delivers what it is intended to do and we are quite happy with the product. There are, however, improvements required in terms of reporting. I would rate this solution an eight out of ten.
Those who want to implement it better have a proper detection in place, especially regarding documents. That's one thing that really drove us nuts because without having reference documentation of the platforms that they were targeting, it became a nightmare. I would rate this solution as eight out of ten, because of the previous reasons that I gave around some of the features that are important for my clients. If it was not for that I would have given it a ten.
I would rate Oracle Audit Vault an eight out of ten. The features are there, but the users don't know how to take full advantage of them. I would strongly recommend that, when evaluating products, they need to understand the key features to leverage them. But again, at the end of the day, it's the mandate of the sales guy to get the customers to understand the product as they go to buy. If a sales guy is not selling well then there's a challenge. I'll pick out the key important features that will provide the most value. I always try to educate clients and tell them to spread out and do a proper proof of concept. If another product is better for resolving specific issues, it is the one they should deploy.