MySQL Enterprise Firewall • NAME • MODE • USERHOST •If the value is non- NULL , the firewall records allowlist rules only for statements received from the named account (which should be a member of the group). •If the value is  NULL , the firewall records allowlist rules for statements received from any account that is a member of the group. • NAME • RULE • MEMBER_ID • GROUP_ID • ID Firewall Account Profile Tables 1565 MySQL Enterprise Firewall maintains account profile information using tables in the  mysql  system database for persistent storage and  INFORMATION_SCHEMA  tables to provide views into in-memory cached data. Each  mysql  system database table is accessible only by accounts that have the  SELECT  privilege for it. The  INFORMATION_SCHEMA  tables are accessible by anyone. The name of an account that is a member of the profile. The group profile name. The  mysql.firewall_membership  table lists the members (accounts) of registered firewall group profiles. The table has the following columns (with the corresponding Performance Schema firewall_membership  table having similar but not necessarily identical columns): An integer column that is a primary key for the table. A normalized statement indicating an acceptable statement pattern for the profile. A profile allowlist is the union of its rules. The group profile name. The  mysql.firewall_group_allowlist  table lists allowlist rules of registered firewall group profiles. The table has the following columns (with the corresponding Performance Schema firewall_group_allowlist  table having similar but not necessarily identical columns): The training account for the group profile, to be used when the profile is in  RECORDING  mode. The value is  NULL , or a non- NULL  account that has the format  user_name @ host_name : The current operational mode for the profile. Permitted mode values are  OFF ,  DETECTING , PROTECTING , and  RECORDING . For details about their meanings, see Firewall Concepts. The group profile name.