MySQL Enterprise Firewall • Firewall_access_denied • Firewall_access_granted • Firewall_access_suspicious • normalize_statement( stmt ) • mysql_firewall_trace • mysql_firewall_mode 1573 Command-Line Format --mysql-firewall-trace[={OFF|ON}] System Variable mysql_firewall_trace Scope Global Dynamic Yes SET_VAR  Hint Applies No Type Boolean Command-Line Format --mysql-firewall-mode[={OFF|ON}] System Variable mysql_firewall_mode Scope Global Dynamic Yes SET_VAR  Hint Applies No Type Boolean Default Value ON Whether MySQL Enterprise Firewall is enabled (the default) or disabled. MySQL Enterprise Firewall supports the following system variables. Use them to configure firewall operation. These variables are unavailable unless the firewall is installed (see Section 6.4.7.2, “Installing or Uninstalling MySQL Enterprise Firewall” ). The same digest functionality is available outside firewall context using the STATEMENT_DIGEST_TEXT()  SQL function. This function normalizes an SQL statement into the digest form used for allowlist rules. It requires the FIREWALL_ADMIN  privilege or the deprecated  SUPER  privilege. Example: Example: This function requires the  FIREWALL_ADMIN  privilege or the deprecated  SUPER  privilege. SELECT mysql_firewall_flush_status(); SELECT normalize_statement(’SELECT * FROM t1 WHERE c1 > 2’); Note MySQL Enterprise Firewall System Variables