content_image/787716.jpg content_image/787704.jpg content_image/787703.jpg
• Firewall_access_denied 

• Firewall_access_granted 

• Firewall_access_suspicious 

This function requires the FIREWALL_ADMIN  privilege or the deprecated SUPER  privilege. 

Example: 

SELECT mysql_firewall_flush_status(); 

• normalize_statement( stmt ) 

This function normalizes an SQL statement into the digest form used for allowlist rules. It requires the FIREWALL_ADMIN  privilege or the deprecated SUPER  privilege. 

## MySQL Enterprise Firewall System Variables 

Example: 

SELECT normalize_statement(’SELECT * FROM t1 WHERE c1 > 2’); 

<img src='content_image/787716.jpg'>

## Note 

The same digest functionality is available outside firewall context using the STATEMENT_DIGEST_TEXT()  SQL function. 

MySQL Enterprise Firewall supports the following system variables. Use them to configure firewall operation. These variables are unavailable unless the firewall is installed (see Section 6.4.7.2, “Installing or Uninstalling MySQL Enterprise Firewall” ). 

• mysql_firewall_mode 

<img src='content_image/787704.jpg'>

Whether MySQL Enterprise Firewall is enabled (the default) or disabled. 

• mysql_firewall_trace 

<img src='content_image/787703.jpg'>

