WMS 11492- SQL Firewall new Livelabs (#157)

* Revert "[WMSID 11492] SQL Firewall new Livelabs (#153)" This reverts commit b00fe40. * Revert "Revert "[WMSID 11492] SQL Firewall new Livelabs (#153)"" This reverts commit 575187b.
oracle-livelabs · Dec 21, 2023 · 41135e2 · 41135e2
1 parent d49821b
commit 41135e2
Show file tree

Hide file tree

Showing 114 changed files with 1,486 additions and 624 deletions.
diff --git a/database/baseline/sqlfw/images/ds-011.png b/database/baseline/sqlfw/images/ds-011.png
diff --git a/database/baseline/sqlfw/images/ds-012.png b/database/baseline/sqlfw/images/ds-012.png
diff --git a/database/baseline/sqlfw/images/ds-013.png b/database/baseline/sqlfw/images/ds-013.png
diff --git a/database/baseline/sqlfw/images/ds-016.png b/database/baseline/sqlfw/images/ds-016.png
diff --git a/database/baseline/sqlfw/images/ds-017.png b/database/baseline/sqlfw/images/ds-017.png
diff --git a/database/baseline/sqlfw/images/ds-018.png b/database/baseline/sqlfw/images/ds-018.png
diff --git a/database/baseline/sqlfw/images/ds-019.png b/database/baseline/sqlfw/images/ds-019.png
diff --git a/database/baseline/sqlfw/images/ds-020.png b/database/baseline/sqlfw/images/ds-020.png
diff --git a/database/baseline/sqlfw/images/ds-021.png b/database/baseline/sqlfw/images/ds-021.png
diff --git a/database/baseline/sqlfw/images/ds-022.png b/database/baseline/sqlfw/images/ds-022.png
diff --git a/database/baseline/sqlfw/images/ds-023.png b/database/baseline/sqlfw/images/ds-023.png
diff --git a/database/baseline/sqlfw/images/ds-009.png → database/baseline/sqlfw/images/sqlfw-010.png b/database/baseline/sqlfw/images/ds-009.png → database/baseline/sqlfw/images/sqlfw-010.png
diff --git a/database/baseline/sqlfw/images/ds-010.png → database/baseline/sqlfw/images/sqlfw-011.png b/database/baseline/sqlfw/images/ds-010.png → database/baseline/sqlfw/images/sqlfw-011.png
diff --git a/database/baseline/sqlfw/images/sqlfw-012.png b/database/baseline/sqlfw/images/sqlfw-012.png
diff --git a/database/baseline/sqlfw/images/sqlfw-013.png b/database/baseline/sqlfw/images/sqlfw-013.png
diff --git a/database/baseline/sqlfw/images/sqlfw-014.png b/database/baseline/sqlfw/images/sqlfw-014.png
diff --git a/database/baseline/sqlfw/images/ds-014.png → database/baseline/sqlfw/images/sqlfw-015.png b/database/baseline/sqlfw/images/ds-014.png → database/baseline/sqlfw/images/sqlfw-015.png
diff --git a/database/baseline/sqlfw/images/ds-015.png → database/baseline/sqlfw/images/sqlfw-016.png b/database/baseline/sqlfw/images/ds-015.png → database/baseline/sqlfw/images/sqlfw-016.png
diff --git a/database/baseline/sqlfw/images/sqlfw-017.png b/database/baseline/sqlfw/images/sqlfw-017.png
diff --git a/database/baseline/sqlfw/images/sqlfw-018.png b/database/baseline/sqlfw/images/sqlfw-018.png
diff --git a/database/baseline/sqlfw/images/sqlfw-019.png b/database/baseline/sqlfw/images/sqlfw-019.png
diff --git a/database/baseline/sqlfw/images/sqlfw-020.png b/database/baseline/sqlfw/images/sqlfw-020.png
diff --git a/database/baseline/sqlfw/images/sqlfw-021.png b/database/baseline/sqlfw/images/sqlfw-021.png
diff --git a/database/baseline/sqlfw/images/sqlfw-022.png b/database/baseline/sqlfw/images/sqlfw-022.png
diff --git a/database/baseline/sqlfw/images/sqlfw-023.png b/database/baseline/sqlfw/images/sqlfw-023.png
diff --git a/database/baseline/sqlfw/images/sqlfw-024.png b/database/baseline/sqlfw/images/sqlfw-024.png
diff --git a/database/baseline/sqlfw/images/ds-024.png → database/baseline/sqlfw/images/sqlfw-025.png b/database/baseline/sqlfw/images/ds-024.png → database/baseline/sqlfw/images/sqlfw-025.png
diff --git a/database/baseline/sqlfw/images/sqlfw-026.png b/database/baseline/sqlfw/images/sqlfw-026.png
diff --git a/database/baseline/sqlfw/images/sqlfw-027.png b/database/baseline/sqlfw/images/sqlfw-027.png
diff --git a/database/baseline/sqlfw/images/sqlfw-028.png b/database/baseline/sqlfw/images/sqlfw-028.png
diff --git a/database/baseline/sqlfw/images/sqlfw-029.png b/database/baseline/sqlfw/images/sqlfw-029.png
diff --git a/database/baseline/sqlfw/images/sqlfw-030.png b/database/baseline/sqlfw/images/sqlfw-030.png
diff --git a/database/baseline/sqlfw/images/sqlfw-031.png b/database/baseline/sqlfw/images/sqlfw-031.png
diff --git a/database/baseline/sqlfw/images/sqlfw-032.png b/database/baseline/sqlfw/images/sqlfw-032.png
diff --git a/database/baseline/sqlfw/images/sqlfw-033.png b/database/baseline/sqlfw/images/sqlfw-033.png
diff --git a/database/baseline/sqlfw/images/sqlfw-034.png b/database/baseline/sqlfw/images/sqlfw-034.png
diff --git a/database/baseline/sqlfw/images/sqlfw-035.png b/database/baseline/sqlfw/images/sqlfw-035.png
diff --git a/database/baseline/sqlfw/images/sqlfw-036.png b/database/baseline/sqlfw/images/sqlfw-036.png
diff --git a/database/baseline/sqlfw/images/sqlfw-037.png b/database/baseline/sqlfw/images/sqlfw-037.png
diff --git a/database/baseline/sqlfw/images/sqlfw-038.png b/database/baseline/sqlfw/images/sqlfw-038.png
diff --git a/database/baseline/sqlfw/images/sqlfw-039.png b/database/baseline/sqlfw/images/sqlfw-039.png
diff --git a/database/baseline/sqlfw/images/sqlfw-040.png b/database/baseline/sqlfw/images/sqlfw-040.png
diff --git a/database/baseline/sqlfw/images/sqlfw-041.png b/database/baseline/sqlfw/images/sqlfw-041.png
diff --git a/database/baseline/sqlfw/images/sqlfw-042.png b/database/baseline/sqlfw/images/sqlfw-042.png
diff --git a/database/baseline/sqlfw/images/sqlfw-043.png b/database/baseline/sqlfw/images/sqlfw-043.png
diff --git a/database/baseline/sqlfw/images/sqlfw-044.png b/database/baseline/sqlfw/images/sqlfw-044.png
diff --git a/database/baseline/sqlfw/images/sqlfw-045.png b/database/baseline/sqlfw/images/sqlfw-045.png
diff --git a/database/baseline/sqlfw/images/sqlfw-046.png b/database/baseline/sqlfw/images/sqlfw-046.png
diff --git a/database/baseline/sqlfw/images/sqlfw-047.png b/database/baseline/sqlfw/images/sqlfw-047.png
diff --git a/database/baseline/sqlfw/images/sqlfw-048.png b/database/baseline/sqlfw/images/sqlfw-048.png
diff --git a/database/baseline/sqlfw/images/sqlfw-049.png b/database/baseline/sqlfw/images/sqlfw-049.png
diff --git a/database/baseline/sqlfw/images/sqlfw-050.png b/database/baseline/sqlfw/images/sqlfw-050.png
diff --git a/database/baseline/sqlfw/images/sqlfw-051.png b/database/baseline/sqlfw/images/sqlfw-051.png
diff --git a/database/baseline/sqlfw/images/sqlfw-052.png b/database/baseline/sqlfw/images/sqlfw-052.png
diff --git a/database/baseline/sqlfw/images/sqlfw-053.png b/database/baseline/sqlfw/images/sqlfw-053.png
diff --git a/database/baseline/sqlfw/images/sqlfw-054.png b/database/baseline/sqlfw/images/sqlfw-054.png
diff --git a/database/baseline/sqlfw/images/sqlfw-055.png b/database/baseline/sqlfw/images/sqlfw-055.png
diff --git a/database/baseline/sqlfw/images/sqlfw-056.png b/database/baseline/sqlfw/images/sqlfw-056.png
diff --git a/database/baseline/sqlfw/images/sqlfw-057.png b/database/baseline/sqlfw/images/sqlfw-057.png
diff --git a/database/baseline/sqlfw/images/sqlfw-058.png b/database/baseline/sqlfw/images/sqlfw-058.png
diff --git a/database/baseline/sqlfw/images/sqlfw-059.png b/database/baseline/sqlfw/images/sqlfw-059.png
diff --git a/database/baseline/sqlfw/images/sqlfw-060.png b/database/baseline/sqlfw/images/sqlfw-060.png
diff --git a/database/baseline/sqlfw/images/sqlfw-061.png b/database/baseline/sqlfw/images/sqlfw-061.png
diff --git a/database/baseline/sqlfw/images/sqlfw-062.png b/database/baseline/sqlfw/images/sqlfw-062.png
diff --git a/database/baseline/sqlfw/images/sqlfw-063.png b/database/baseline/sqlfw/images/sqlfw-063.png
diff --git a/database/baseline/sqlfw/images/sqlfw-064.png b/database/baseline/sqlfw/images/sqlfw-064.png
diff --git a/database/baseline/sqlfw/images/sqlfw-065.png b/database/baseline/sqlfw/images/sqlfw-065.png
diff --git a/database/baseline/sqlfw/images/sqlfw-066.png b/database/baseline/sqlfw/images/sqlfw-066.png
diff --git a/database/baseline/sqlfw/images/sqlfw-067a.png b/database/baseline/sqlfw/images/sqlfw-067a.png
diff --git a/database/baseline/sqlfw/images/sqlfw-067b.png b/database/baseline/sqlfw/images/sqlfw-067b.png
diff --git a/database/baseline/sqlfw/images/sqlfw-067c.png b/database/baseline/sqlfw/images/sqlfw-067c.png
diff --git a/database/baseline/sqlfw/images/sqlfw-068.png b/database/baseline/sqlfw/images/sqlfw-068.png
diff --git a/database/baseline/sqlfw/images/sqlfw-069a.png b/database/baseline/sqlfw/images/sqlfw-069a.png
diff --git a/database/baseline/sqlfw/images/sqlfw-069b.png b/database/baseline/sqlfw/images/sqlfw-069b.png
diff --git a/database/baseline/sqlfw/images/sqlfw-069c.png b/database/baseline/sqlfw/images/sqlfw-069c.png
diff --git a/database/baseline/sqlfw/images/sqlfw-070.png b/database/baseline/sqlfw/images/sqlfw-070.png
diff --git a/database/baseline/sqlfw/images/sqlfw-071.png b/database/baseline/sqlfw/images/sqlfw-071.png
diff --git a/database/baseline/sqlfw/images/sqlfw-072.png b/database/baseline/sqlfw/images/sqlfw-072.png
diff --git a/database/baseline/sqlfw/images/sqlfw-073.png b/database/baseline/sqlfw/images/sqlfw-073.png
diff --git a/database/baseline/sqlfw/images/sqlfw-074.png b/database/baseline/sqlfw/images/sqlfw-074.png
diff --git a/database/baseline/sqlfw/images/sqlfw-075.png b/database/baseline/sqlfw/images/sqlfw-075.png
diff --git a/database/baseline/sqlfw/images/sqlfw-076.png b/database/baseline/sqlfw/images/sqlfw-076.png
diff --git a/database/baseline/sqlfw/images/sqlfw-077.png b/database/baseline/sqlfw/images/sqlfw-077.png
diff --git a/database/baseline/sqlfw/images/sqlfw-078.png b/database/baseline/sqlfw/images/sqlfw-078.png
diff --git a/database/baseline/sqlfw/images/sqlfw-079.png b/database/baseline/sqlfw/images/sqlfw-079.png
diff --git a/database/baseline/sqlfw/images/sqlfw-080.png b/database/baseline/sqlfw/images/sqlfw-080.png
diff --git a/database/baseline/sqlfw/images/sqlfw-082.png b/database/baseline/sqlfw/images/sqlfw-082.png
diff --git a/database/baseline/sqlfw/images/sqlfw-090.png b/database/baseline/sqlfw/images/sqlfw-090.png
diff --git a/database/baseline/sqlfw/images/sqlfw-091.png b/database/baseline/sqlfw/images/sqlfw-091.png
diff --git a/database/baseline/sqlfw/images/sqlfw-092.png b/database/baseline/sqlfw/images/sqlfw-092.png
diff --git a/database/baseline/sqlfw/images/sqlfw-202.png b/database/baseline/sqlfw/images/sqlfw-202.png
diff --git a/database/baseline/sqlfw/images/sqlfw-203.png b/database/baseline/sqlfw/images/sqlfw-203.png
diff --git a/database/baseline/sqlfw/images/sqlfw-204.png b/database/baseline/sqlfw/images/sqlfw-204.png
diff --git a/database/baseline/sqlfw/images/sqlfw-205.png b/database/baseline/sqlfw/images/sqlfw-205.png
diff --git a/database/baseline/sqlfw/images/sqlfw-206.png b/database/baseline/sqlfw/images/sqlfw-206.png
diff --git a/database/baseline/sqlfw/images/sqlfw-207.png b/database/baseline/sqlfw/images/sqlfw-207.png
diff --git a/database/baseline/sqlfw/images/sqlfw-250.png b/database/baseline/sqlfw/images/sqlfw-250.png
diff --git a/database/baseline/sqlfw/images/sqlfw-251.png b/database/baseline/sqlfw/images/sqlfw-251.png
diff --git a/database/baseline/sqlfw/sqlfw.md b/database/baseline/sqlfw/sqlfw.md
diff --git a/database/baseline/sqlfw/sqlfw_v5.3.md b/database/baseline/sqlfw/sqlfw_v5.3.md
diff --git a/database/baseline/workshops/desktop-sqlfw/manifest.json b/database/baseline/workshops/desktop-sqlfw/manifest.json
@@ -17,7 +17,7 @@
       "title": "Lab 1: Initialize Environment",
       "description": "How to initialize and start all the workshop components",
       "publisheddate": "10/14/2020",
-      "filename": "../../../common/init-start-env/init-start-env.md"
+      "filename": "../../../common/init-start-env/init-start-env-sqlfw.md"
     },
     {
       "title": "Lab 2: SQL Firewall",

diff --git a/database/baseline/workshops/desktop/manifest.json b/database/baseline/workshops/desktop/manifest.json
@@ -50,13 +50,7 @@
       "filename": "../../tsdp/tsdp.md"
     },
     {
-      "title": "Lab 7: SQL Firewall",
-      "description": "In this lab you can see how to leverage Oracle SQL Firewall",
-      "publisheddate": "08/18/2023",
-      "filename": "../../sqlfw/sqlfw.md"
-    },
-    {
-      "title": "Lab 8: Data Safe for on-premises database",
+      "title": "Lab 7: Data Safe for on-premises database",
       "description": "In this lab you can see how to leverage Oracle Data Safe",
       "publisheddate": "10/11/2021",
       "filename": "../../data-safe/data-safe.md"

diff --git a/database/baseline/workshops/freetier-sqlfw/manifest.json b/database/baseline/workshops/freetier-sqlfw/manifest.json
@@ -30,7 +30,7 @@
       "title": "Lab 3: Initialize Environment",
       "description": "How to initialize and start all the workshop components",
       "publisheddate": "10/14/2020",
-      "filename": "../../../common/init-start-env/init-start-env.md"
+      "filename": "../../../common/init-start-env/init-start-env-sqlfw.md"
     },
     {
       "title": "Lab 4: SQL Firewall",

diff --git a/database/baseline/workshops/freetier/manifest.json b/database/baseline/workshops/freetier/manifest.json
@@ -63,13 +63,7 @@
       "filename": "../../tsdp/tsdp.md"
     },
     {
-      "title": "Lab 9: SQL Firewall",
-      "description": "In this lab you can see how to leverage Oracle SQL Firewall",
-      "publisheddate": "08/18/2023",
-      "filename": "../../sqlfw/sqlfw.md"
-    },
-    {
-      "title": "Lab 10: Data Safe for on-premises database",
+      "title": "Lab 9: Data Safe for on-premises database",
       "description": "In this lab you can see how to leverage Oracle Data Safe",
       "publisheddate": "10/11/2021",
       "filename": "../../data-safe/data-safe.md"

diff --git a/database/baseline/workshops/livelabs-sqlfw/manifest.json b/database/baseline/workshops/livelabs-sqlfw/manifest.json
@@ -17,7 +17,7 @@
       "title": "Lab 2: Initialize Environment",
       "description": "How to initialize and start all the workshop components",
       "publisheddate": "10/14/2020",
-      "filename": "../../../common/init-start-env/init-start-env.md"
+      "filename": "../../../common/init-start-env/init-start-env-sqlfw.md"
     },
     {
       "title": "Lab 3: SQL Firewall",

diff --git a/database/baseline/workshops/livelabs/manifest.json b/database/baseline/workshops/livelabs/manifest.json
@@ -50,13 +50,7 @@
       "filename": "../../tsdp/tsdp.md"
     },
     {
-      "title": "Lab 8: SQL Firewall",
-      "description": "In this lab you can see how to leverage Oracle SQL Firewall",
-      "publisheddate": "08/18/2023",
-      "filename": "../../sqlfw/sqlfw.md"
-    },
-    {
-      "title": "Lab 9: Data Safe for on-premises database",
+      "title": "Lab 8: Data Safe for on-premises database",
       "description": "In this lab you can see how to leverage Oracle Data Safe",
       "publisheddate": "10/11/2021",
       "filename": "../../data-safe/data-safe.md"

diff --git a/database/common/init-start-env/images/init-start-env-sqlfw-001.png b/database/common/init-start-env/images/init-start-env-sqlfw-001.png
diff --git a/database/common/init-start-env/images/init-start-env-sqlfw-002.png b/database/common/init-start-env/images/init-start-env-sqlfw-002.png
diff --git a/database/common/init-start-env/images/init-start-env-sqlfw-003.png b/database/common/init-start-env/images/init-start-env-sqlfw-003.png
diff --git a/database/common/init-start-env/images/init-start-env-sqlfw-004.png b/database/common/init-start-env/images/init-start-env-sqlfw-004.png
diff --git a/database/common/init-start-env/images/init-start-env-sqlfw-005.png b/database/common/init-start-env/images/init-start-env-sqlfw-005.png
diff --git a/database/common/init-start-env/images/init-start-env-sqlfw-006.png b/database/common/init-start-env/images/init-start-env-sqlfw-006.png
diff --git a/database/common/init-start-env/init-start-env-sqlfw.md b/database/common/init-start-env/init-start-env-sqlfw.md
@@ -0,0 +1,258 @@
+# Initialize Environment
+
+## Introduction
+
+In this lab we will review and startup all components required to successfully run this workshop.
+
+Estimated Time: 10 Minutes.
+
+### Objectives
+- Initialize the workshop environment.
+
+### Prerequisites
+This lab assumes you have:
+- An Oracle Cloud account
+- You have completed:
+    - Lab: Prepare Setup 
+    - Lab: Environment Setup
+
+## Task 1: Validate That Required Processes are Up and Running.
+
+**Note:** All screenshots for SSH terminal type tasks featured throughout this workshop were captured using the *MobaXterm* SSH Client as described in this step. As a result when executing such tasks from within the graphical remote desktop session, skip steps requiring you to login as user *oracle* using *sudo su - oracle*, the reason being that the remote desktop session is under user *oracle*.
+
+1. Now with access to your remote desktop session, proceed as indicated below to validate your environment before you start executing the subsequent labs. The following Processes should be up and running:
+
+    - Database Listener
+    - Database Servers (emcdb and cdb1)
+    - Enterprise Manager - Management server (OMS)
+    - Enterprise Manager - Management Agent (emagent)
+    - My HR Applications on Glassfish
+
+2. On the web browser window on the right is a tab preloaded with *Enterprise Manager*, login with the credentials below to validate that it's operational. If the login page is not displayed on first login to the remote desktop, refresh to reload. It takes ~15 minutes for all processes to fully start.
+
+    ```
+    Username: <copy>sysman</copy>
+    ```
+
+    ```
+    Password: <copy>Oracle123</copy>
+    ```
+
+    ![Enterprise Manager Login](images/em-login.png "Enterprise Manager Login")
+
+3. Open new browser tabs and confirm successful rendering of *My HR Applications* listed below.
+
+    - PDB1
+
+    ```
+    Prod: <copy>http://dbsec-lab:8080/hr_prod_pdb1</copy>
+    ```
+
+    ```
+    Dev: <copy>http://dbsec-lab:8080/hr_dev_pdb1</copy>
+    ```
+
+    - PDB2
+
+    ```
+    Prod: <copy>http://dbsec-lab:8080/hr_prod_pdb2</copy>
+    ```
+
+    ```
+    Dev: <copy>http://dbsec-lab:8080/hr_dev_pdb2</copy>
+    ```
+
+    If all are successful, then your environment is ready.  
+
+4. If you are still unable to get all *Enterprise Manager* and all links above to render successfully, open a terminal session and proceed as indicated below to validate the services.
+
+    - Database services (All databases and Standard Listener)
+
+        ```
+        <copy>
+        sudo systemctl status oracle-database
+        </copy>
+        ```
+
+        ![DB Service Status](images/db-service-status.png "DB Service Status")
+
+    - DBSec-lab Service (Enterprise Manager 13c and My HR Applications on Glassfish)
+
+        ```
+        <copy>
+        sudo systemctl status oracle-dbsec-lab
+        </copy>
+        ```
+
+        ![DBSecLab Service Status](images/dbsec-lab-service-status.png "DBSecLab Service Status")
+
+5. If you see questionable output(s), failure or down component(s), restart the corresponding service(s) accordingly
+
+    - Database and Listener
+
+        ```
+        <copy>
+        sudo systemctl restart oracle-database
+        </copy>
+        ```
+
+    - DBSec-lab Service
+
+        ```
+        <copy>
+        sudo systemctl restart oracle-dbsec-lab
+        </copy>
+        ```
+
+## Task 2 - Set Glassfish to use freepdb1 database in the DB23c VM
+
+Here, we will modify the default Glassfish connection to target an Oracle Database 23c, so we can monitor, and block, SQL commands
+
+1. Open a Terminal session on your **DBSec-Lab** VM as OS user *oracle*
+
+    ```
+    <copy>sudo su - oracle</copy>
+    ```
+
+    **Note**: If you are using a remote desktop session, double-click on the *Terminal* icon on the desktop to launch a session
+
+2. Go to the scripts directory
+
+    ```
+    <copy>cd $DBSEC_LABS/sqlfw</copy>
+    ```
+
+3. Migrate the Glassfish Application connection string in order to target the 23c database
+
+    ```
+    <copy>./sqlfw_glassfish_start_db23c.sh</copy>
+    ```
+
+    ![SQLFW](./images/init-start-env-sqlfw-001.png "Set HR App with DB23c")
+
+    **Note**: Here, we connect Glassfish to the database **`FREEPDB1`** (DB 23c) on the **`db23c`** VM
+
+4. Next, verify the application functions as expected
+
+    - Open a Web Browser at the URL *`http://dbsec-lab:8080/hr_prod_pdb1`* to access to **your Glassfish App**
+
+        **Notes:** If you are not using the remote desktop you can also access this page by going to *`http://<YOUR_DBSEC-LAB_VM_PUBLIC_IP>:8080/hr_prod_pdb1`*
+    
+    - Login to the application as *`hradmin`* with the password "*`Oracle123`*"
+
+        ```
+        <copy>hradmin</copy>
+        ```
+
+        ```
+        <copy>Oracle123</copy>
+        ```
+
+        ![SQLFW](./images/init-start-env-sqlfw-002.png "HR App - Login")
+
+        ![SQLFW](./images/init-start-env-sqlfw-003.png "HR App - Login")
+
+    - In the top right hand corner of the App, click on the **Welcome HR Administrator** link and you will be sent to a page with session data
+
+        ![SQLFW](./images/init-start-env-sqlfw-004.png "HR App - Settings")
+
+    - On the **Session Details** screen, you will see how the application is connected to the database. This information is taken from the **userenv** namespace by executing the `SYS_CONTEXT` function.
+
+        ![SQLFW](./images/init-start-env-sqlfw-005.png "HR App - Session details")
+
+    - Now, you should see **FREEPDB1** as the **`DB_NAME`** and **db23c** as the **HOST**
+
+        ![SQLFW](./images/init-start-env-sqlfw-006.png "HR App - Check the targetted database")
+
+You may now **proceed to the next lab**.
+
+## Appendix 1: Managing Startup Services
+
+1. Database services (All databases and Standard Listener)
+
+    - Start
+
+    ```
+    <copy>sudo systemctl start oracle-database</copy>
+    ```
+    - Stop
+
+    ```
+    <copy>sudo systemctl stop oracle-database</copy>
+    ```
+
+    - Status
+
+    ```
+    <copy>sudo systemctl status oracle-database</copy>
+    ```
+
+    - Restart
+
+    ```
+    <copy>sudo systemctl restart oracle-database</copy>
+    ```
+
+2. DBSec-lab Service (Enterprise Manager 13c and My HR Applications on Glassfish)
+
+    - Start
+
+    ```
+    <copy>sudo systemctl start oracle-dbsec-lab</copy>
+    ```
+
+    - Stop
+
+    ```
+    <copy>sudo systemctl stop oracle-dbsec-lab</copy>
+    ```
+
+    - Status
+
+    ```
+    <copy>sudo systemctl status oracle-dbsec-lab</copy>
+    ```
+
+    - Restart
+
+    ```
+    <copy>sudo systemctl restart oracle-dbsec-lab</copy>
+    ```
+
+## Appendix 2: External Web Access
+
+If for any reason you want to login from a location that is external to your remote desktop session such as your workstation/laptop, then refer to the details below.
+
+1.  Enterprise Manager 13c Console
+
+    ```
+    Username: <copy>sysman</copy>
+    ```
+
+    ```
+    Password: <copy>Oracle123</copy>
+    ```
+
+    ```
+    URL: <copy>http://<Your Instance public_ip>:7803/em</copy>
+    ```
+
+    - *Note:* You may see an error on the browser while accessing the Web Console - “*Your connection is not private*” as shown below. Ignore and add the exception to proceed.
+
+    ![Enterprise Manager External Login](images/login-em-external-1.png "Enterprise Manager External Login")
+    ![Enterprise Manager External Login](images/login-em-external-2.png "Enterprise Manager External Login")
+
+2. My HR Applications on Glassfish
+
+    - PDB1
+      - Prod        : `http://<YOUR_DBSECLAB-VM_PUBLIC-IP>:8080/hr_prod_pdb1`
+      - Dev         : `http://<YOUR_DBSECLAB-VM_PUBLIC-IP>:8080/hr_dev_pdb1`   (bg: red)
+    - PDB2
+      - Prod        : `http://<YOUR_DBSECLAB-VM_PUBLIC-IP>:8080/hr_prod_pdb2`  (menu: red)
+      - Dev         : `http://<YOUR_DBSECLAB-VM_PUBLIC-IP>:8080/hr_dev_pdb2`   (bg: red & menu: red)
+
+
+## Acknowledgements
+- **Author** - Rene Fontcha, LiveLabs Platform Lead, NA Technology
+- **Contributors** - Hakim Loumi
+- **Last Updated By/Date** - Marion Smith, Technical Program Manager, April 2022
diff --git a/database/common/prepare-setup/prepare-setup.md b/database/common/prepare-setup/prepare-setup.md
@@ -53,7 +53,7 @@ This lab assumes you have:
     - [dbseclabs-v54_init-vm-pa.zip](https://objectstorage.us-ashburn-1.oraclecloud.com/p/AUKfPIGuTde04z4OnuaZN2EP0LxNl4hJWI2jZiTw23aWzSoa2_Byvs8OGPw20-dt/n/c4u04/b/livelabsfiles/o/security-library/dbseclabs-v54_init-vm-pa.zip)
 </if>
 <if type="sqlfw">
-    - [dbseclabs-v54_sqlfw.zip](https://objectstorage.us-ashburn-1.oraclecloud.com/p/AUKfPIGuTde04z4OnuaZN2EP0LxNl4hJWI2jZiTw23aWzSoa2_Byvs8OGPw20-dt/n/c4u04/b/livelabsfiles/o/security-library/dbseclabs-v54_sqlfw.zip)
+    - [dbseclabs-v55_sqlfw.zip](https://objectstorage.us-ashburn-1.oraclecloud.com/p/AUKfPIGuTde04z4OnuaZN2EP0LxNl4hJWI2jZiTw23aWzSoa2_Byvs8OGPw20-dt/n/c4u04/b/livelabsfiles/o/security-library/dbseclabs-v55_sqlfw.zip)
 </if>
 <if type="story-hack">
     - [dbseclabs-v45_storyhack.zip](https://objectstorage.us-ashburn-1.oraclecloud.com/p/AUKfPIGuTde04z4OnuaZN2EP0LxNl4hJWI2jZiTw23aWzSoa2_Byvs8OGPw20-dt/n/c4u04/b/livelabsfiles/o/security-library/dbseclabs-v45_storyhack.zip)