MySQL Enterprise Firewall Note Note Important 1561 Because the profile is in  RECORDING  mode, the firewall records the normalized digest form of the statements as rules in the profile allowlist. Until the  fwuser@localhost  account profile receives statements in RECORDING  mode, its allowlist is empty, which is equivalent to “deny all.”  No statement can match an empty allowlist, which has these implications: The  @@version_comment  rule comes from a statement sent automatically by the  mysql  client when you connect to the server. Train the firewall under conditions matching application use. For example, to determine server characteristics and capabilities, a given MySQL connector might send statements to the server at the beginning of each session. If an application normally is used through that connector, train the firewall using the connector, too. That enables those initial statements to become part of the allowlist for the account profile associated with the application. •The account profile cannot be switched to  PROTECTING  mode. It would reject every statement, effectively prohibiting the account from executing any statement. •The account profile can be switched to  DETECTING  mode. In this case, the profile accepts every statement but logs it as suspicious. 4. At this point, the account profile information is cached. To see this information, query the INFORMATION_SCHEMA  firewall tables: mysql>  SELECT MODE FROM INFORMATION_SCHEMA.MYSQL_FIREWALL_USERS WHERE USERHOST = ’fwuser@localhost’; +-----------+ | MODE | +-----------+ | RECORDING | +-----------+ mysql>  SELECT RULE FROM INFORMATION_SCHEMA.MYSQL_FIREWALL_WHITELIST WHERE USERHOST = ’fwuser@localhost’; +----------------------------------------------------------------------------+ | RULE | +----------------------------------------------------------------------------+ | SELECT ‘first_name‘ , ‘last_name‘ FROM ‘customer‘ WHERE ‘customer_id‘ = ? | | SELECT ‘get_customer_balance‘ ( ? , NOW ( ) ) | | UPDATE ‘rental‘ SET ‘return_date‘ = NOW ( ) WHERE ‘rental_id‘ = ? | | SELECT @@‘version_comment‘ LIMIT ? | +----------------------------------------------------------------------------+