Audit Events
Activity › Audit Events records administrative changes made in FiveGuardian5: who did what and when. For example:
- Creation, modification or deletion of policies, groups, routes, networks and DNS configuration.
- Adding, approving, blocking or deleting users and devices.
- Creating or revoking setup keys and settings changes.
- Sign-ins and other relevant user actions.
Audit Events is included for all clients; it does not require a premium module. You can filter by date, user or event type to find a change quickly.
Traffic Events
Activity › Traffic Events will show metadata of network connections between devices and resources (source, destination, protocol, time), without the traffic content. It is a premium module and is currently being rolled out; contact Support for availability. See Licensing and premium modules.
Retention
Retention periods are defined with each organization according to its compliance obligations; to learn them, contact Support. See Security and privacy for what data is recorded.
Sending to other platforms
With the Event Streaming module, events can be sent to external monitoring or storage platforms, such as a security event management system. Configuration is already available; event delivery is being rolled out. See Event Streaming.
Client metrics
Settings › Metrics holds options related to operational metrics of the clients on devices. These metrics are technical (connection status and performance) and are used for diagnostics. Before changing these options, check with the FiveGuardian5 support team.
Use in compliance reviews
- Periodically review change events for policies and administrator users, and confirm that each change was expected and approved.
- For a formal audit, ask the FiveGuardian5 support team for the records of the required period.
- Activity records must not be shared beyond authorized people; they may contain user and device names.