MySQL Enterprise Data Masking and De-Identification Default Value OFF Whether the MySQL Enterprise Firewall trace is enabled or disabled (the default). When mysql_firewall_trace  is enabled, for  PROTECTING  mode, the firewall writes rejected statements to the error log. MySQL Enterprise Firewall supports the following status variables. Use them to obtain information about firewall operational status. These variables are unavailable unless the firewall is installed (see Section 6.4.7.2, “Installing or Uninstalling MySQL Enterprise Firewall” ). Firewall status variables are set to 0 whenever the  MYSQL_FIREWALL  plugin is installed or the server is started. Many of them are reset to zero by the  mysql_firewall_flush_status()  function (see MySQL Enterprise Firewall Administrative Functions). The number of statements rejected by MySQL Enterprise Firewall. The number of statements accepted by MySQL Enterprise Firewall. The number of statements logged by MySQL Enterprise Firewall as suspicious for users who are in DETECTING  mode. The number of statements recorded by MySQL Enterprise Firewall, including duplicates. MySQL Enterprise Data Masking and De-Identification is an extension included in MySQL Enterprise Edition, a commercial product. To learn more about commercial products, https://www.mysql.com/products/. As of MySQL 8.0.13, MySQL Enterprise Edition provides data masking and de-identification capabilities: The way that applications use these capabilities depends on the purpose for which the data is used and who accesses it: 1574 •Applications that require properly formatted data, but not necessarily the original data, can synthesize sample data. Example: An application developer who is testing data validators but has no access to original data may synthesize random data with the same format. •Applications that use sensitive data may protect it by performing data masking and permitting use of partially masked data for client identification. Example: A call center may ask for clients to provide their last four Social Security number digits. •Generation of random data, such as email addresses and payment card numbers. •Transformation of existing data to mask it and remove identifying characteristics, such as changing all digits of a credit card number but the last four to  ’X’  characters. Note 6.5 MySQL Enterprise Data Masking and De-Identification • Firewall_cached_entries • Firewall_access_suspicious • Firewall_access_granted • Firewall_access_denied MySQL Enterprise Firewall Status Variables