When configuring native audits within the Oracle endpoint and specifying 'By Session', the audits ar (NETIQKB44424)

fact
VigilEnt Security Agent for Oracle 2.0

fact
NetIQ Vulnerability Manager 5.5

fact
NetIQ Vulnerability Manager 5.0

symptom
When configuring native audits within the Oracle endpoint and specifying 'By Session', the audits are submitted as 'By Access'. 

symptom
Oracle audit options are being added to the Oracle audit tables, dba_stmt_audit_opts and dba_priv_audit_opts as 'By Access' rather than 'By Session'.

cause
This is due to native Oracle functionality.  When enabling auditing on the creating and editing of obects, Data Definition Language (DDL) statements can only be added to the Oracle audit tables based on Access Only.  If Session Only is selected, the rows that are added will be changed to Access Only.

fix
This issue is based on native Oracle functionality and is therefore by design.

Formerly known as NETIQKB44424