MySQL Workbench Manual  /  Administrative Tasks  /  MySQL Enterprise Firewall Interface

6.8 MySQL Enterprise Firewall Interface

MySQL Workbench provides a graphical interface to MySQL Enterprise Firewall.


The MySQL Enterprise Firewall interface was added in MySQL Workbench 6.3.4.

For additional information about MySQL Enterprise Firewall, see

Setup and Configuration

MySQL Workbench can manage the MySQL Enterprise Firewall installation and configuration by installing (or uninstalling) and enabling (or disabling) the plugin as follows:

  • Enable: Executes SET GLOBAL mysql_firewall_mode = ON; against the connected MySQL server. Disable sets it to OFF instead of ON.

    This is a runtime operation. Configure the MySQL server configuration file to enable MySQL Enterprise Firewall at startup.

  • Install: Executes queries to install the new MySQL Enterprise Firewall tables and stored procedure needed to switch the state. Uninstall reverses these effects, which also removes the recorded rules.


Alternatively, you can manually install and enable MySQL Enterprise Firewall. For additional information, see Installing or Uninstalling MySQL Enterprise Firewall.

The following figure shows the first step to install and enable MySQL Enterprise Firewall from within MySQL Workbench.

Figure 6.39 MySQL Enterprise Firewall Installation and Configuration

Content is described in the surrounding text.

Because clicking Enable Firewall from MySQL Workbench is a runtime operation, enabling the mysql_firewall_mode option in the configuration option will enable it after a restart (see the figure that follows). You can edit the MySQL configuration file with an external editor or use MySQL Workbench to edit it.

Figure 6.40 Edit MySQL Enterprise Firewall Options Using Workbench

Content is described in the surrounding text.

Firewall Rules and Information

The Firewall Rules tab lists the active and recorded rules for a given user, the state of each rule, and includes options to add, delete, and save rules. The next figure shows the actions available within the Firewall Rules tab.

  • State (mode): Options include OFF (disables the firewall), PROTECTING (enables the whitelist), RECORDING (training mode), and RESET (removes the rules). For additional information about the meaning of these states, see MySQL Enterprise Firewall Procedures and Functions.

  • Administrative actions include Add and Delete for individual rules, and Clear to clear (remove) all rules. Add From File prompts for a firewall rules text file (defaults to the .fwr extension) that contains one rule per line, and Save To File saves the current rules.

  • Active rules are used in PROTECTIVE mode, and Rules being recorded are entries still being RECORDED. Switching from RECORDING to PROTECTING mode copies the recorded rules into the active rule subset.


MySQL Workbench executes queries, gets variables, and performs a lot of checks. For this reason, MySQL Workbench is more useful as an administration tool for MySQL Enterprise Firewall than a tool to record rules. For example, RECORDING rules in MySQL Workbench will record the behind-the-scenes operations performed by MySQL Workbench for the MySQL user. Also, using MySQL Workbench by a MySQL user in PROTECTING mode will attempt to execute operations that a typical firewalled MySQL user might not have access to.

Figure 6.41 MySQL Enterprise Firewall Rules

Content is described in the surrounding text.

User Comments
Sign Up Login You must be logged in to post a comment.