MySQL Enterprise Firewall | SELECT @@‘version_comment‘ LIMIT ? | | UPDATE ‘actor‘ SET ‘last_update‘ = NOW ( ) WHERE ‘actor_id‘ = ? | | SELECT ‘title‘ , ‘release_year‘ FROM ‘film‘ WHERE ‘film_id‘ = ? | | SELECT ‘store_id‘ , COUNT ( * ) FROM ‘inventory‘ GROUP BY ‘store_id‘ | +----------------------------------------------------------------------+ Note Important The  @@version_comment  rule comes from a statement sent automatically by the  mysql  client when you connect to the server. Train the firewall under conditions matching application use. For example, to determine server characteristics and capabilities, a given MySQL connector might send statements to the server at the beginning of each session. If an application normally is used through that connector, train the firewall using the connector, too. That enables those initial statements to become part of the allowlist for the group profile associated with the application. Switching the group profile out of  RECORDING  mode synchronizes its cached data to the  mysql  system database tables that provide persistent underlying storage. If you do not switch the mode for a profile that is being recorded, the cached data is not written to persistent storage and is lost when the server is restarted. The profile allowlist trained using the  member1@localhost  account now also applies to the additional accounts. 1557 mysql>  SELECT * FROM performance_schema.firewall_membership WHERE GROUP_ID = ’fwgrp’ ORDER BY MEMBER_ID; +----------+-------------------+ | GROUP_ID | MEMBER_ID | +----------+-------------------+ | fwgrp | member1@localhost | | fwgrp | member2@localhost | | fwgrp | member3@localhost | | fwgrp | member4@localhost | +----------+-------------------+ 8. To verify the updated group membership, query the  firewall_membership  table again: 7. Add to the group profile any other accounts that should be members: CALL mysql.sp_firewall_group_enlist(’fwgrp’, ’member2@localhost’); CALL mysql.sp_firewall_group_enlist(’fwgrp’, ’member3@localhost’); CALL mysql.sp_firewall_group_enlist(’fwgrp’, ’member4@localhost’); Important 6. Invoke  sp_set_firewall_group_mode()  again to switch the group profile to  PROTECTING  mode: CALL mysql.sp_set_firewall_group_mode(’fwgrp’, ’PROTECTING’);