Command Auditing (asg log audit)
Use the CLI command auditing to:
-
Notify users about critical actions they are about to do
-
Obtain confirmation for critical actions
-
Create forensic logs
If users confirm the action, it is necessary to supply their names and provide a reason for running the command.
If the command affects a Critical Device (Pnote), a second confirmation can be required.
For example, if you use administrative privileges to change the state of a Security Group
A logical group of Security Gateway Modules that provides Active/Active cluster functionality. A Security Group can contain one or more Security Gateway Modules. Security Groups work separately and independently from each other. To the production networks, a Security Group appears a single Security Gateway. Member to DOWN, the output looks like this:
Description
Use the "asg log audit" command to see the audit logs.
Syntax
|
|
Example