Appendix

Created Gateway

Deleted Gateway

Initiated reboot on Gateway

Initiated Upgrade to version <ver no.> on Gateway

Initiated rollback on Gateway

Restarted services

Created configuration

Edited configuration

Deleted configuration

Config Import

Config Export

TOTP User Config Import

TOTP USer Config Export

Created Config sync rule

Deleted Config sync rule

Modified Config sync rule

Triggered Config sync rule

Created Admin Management > Authentication Servers > {}, type: {}

Updated Admin Management > Authentication Servers > {}, type: {}

Deleted Admin Management > Authentication Servers > {}

Created Admin Management > Authentication Servers > {} > Added user: {}

Created Admin Management > Authentication Servers > {} > Added users: {}

Deleted Admin Management > Authentication Servers > {} > Deleted user: {}

Deleted Admin Management > Authentication Servers > {} > Deleted users: {}

Updated Admin Management > Authentication Servers > {} > Updated user: {}

Created Admin Management > Admin Rules > {} type: {} and value: {}

Updated Admin Management > Admin Rules > {} type: {} and value: {}

Deleted Admin Management > Admin Rules > {}

Created Admin Roles > {}

Updated Admin Roles > {} from user-group: {} to {}

Deleted Admin Roles > {}

Deleted Admin Roles > {}

Created Admin Management > Admin Groups > {}

Updated Admin Management > Admin Groups > {} from rules: {} to {} and admin-policy: {}

Deleted Admin Management > Admin Groups > admin group: {}

Deleted Admin Management > Admin Groups > admin rule: {} from {}

Created Admin Management > Admin Policies > {}

Updated Admin Management > Admin Policies > {} with primary auth-server: {} to {} and secondary auth-server: {} to {}

Deleted Admin Management > Admin Policies > {}

Deleted Admin Management > Admin Policies > admin policies: {}

Created Admin Management > Device Policies > {}

Updated Admin Management > Device Policies > {} > Rules deleted: {} Rules Added: {}

Deleted Admin Management > Device Policies > {}

Deleted Admin Management > Device Policies > {} > {}

Created Admin Management > Device Policies > device rule: {}

Updated Admin Management > Device Policies > device rule: {}

Deleted Admin Management > Device Policies > device rule: {}

Deleted Admin Management > Device Policies > device rules: {}

Initiated import of Device Certificate

Initiated import of Client-Auth Certificate

Initiated creation of Device Certificate CSR

Initiated creation of Client-Auth Certificate CSR

Initiated import of Code Signing Certificate

Uploaded ESAP package version

Deleted ESAP package version

Initiated ESAP Activation on multiple nodes

Initiated MultiNode Upgrade

Initiated Cluster Upgrade

Initiated rollback on cluster

Initiated Cluster Actions like VIP-Failover, enable or disable Nodes

Initiated Cluster operations like restart or reboot

Updated cluster properties like mode, VIP, etc.

Created ICS Gateway Cluster with nodes

Added Node to ICS Gateway Cluster

Removed Node From ICS Gateway Cluster

Deleted ICS Gateway Cluster

Deleted Named user and devices

Modified Named Users Auto Delete

Updated Settings > Session Options > idle_timeout: {} and max_session_length: {}

Created Config sync scheduled job

Deleted Config sync scheduled job

Edited Config sync scheduled job

Primary authentication successful for user

Received Access Request from user

Started authentication with primary-auth-server

Primary authentication failed for user

Admin user logged out

Secondary authentication successful for user

User mapped to groups by rule

Session created for User mapped to groups by role

Secondary authentication failed for user

Login succeeded for user

Password changed for user

Anomalies acknowledged

Anomaly - Session has been successfully terminated

Non-Compliance acknowledged

Non-Compliance - Session has been successfully terminated

User Threat score for {} reset successfully

{} - {} Job successfully created

Scheduled Jobs > Job(s): {} successfully deleted

Scheduled Jobs > Job(s): {} successfully suspended

Scheduled Jobs > Job(s): {} successfully resumed

Scheduled Jobs > Job run(s): {} successfully deleted

Scheduled Jobs > Job run(s): {} successfully suspended

Scheduled Jobs > Job run(s): {} successfully resumed

Job(s) > {} successfully downloaded

Insights > Session Management, Selected Sessions {} successfully terminated

Insights > Session Management, All Sessions successfully terminated

Insights > Session Management, Selected Active sync sessions {} successfully terminated

Insights > Session Management, All Active sync sessions successfully terminated

Insights > Session Management, Blocked access for sessions with {} successfully

Insights > Session Management, Allowed access for sessions with {} successfully

Actionable Insights > UEBA Threat Score: {} and Action Type: {} is created successfully

Actionable Insights > UEBA Threat Score: {} and Action Type: {} is updated successfully

Actionable Insights > Action Type: {} deleted successfully

Reports > {} is successfully sent to user: {}

Reports > Successfully {} is generated

Reports > Successfully {} is deleted

Reports > Successfully {} is downloaded

Reports > Successfully {} is updated