Audit

The Audit section provides detailed tracking of access sessions to devices connected via VPN Realm and VPN L2.

This feature allows monitoring the activities of each Workstation towards the associated Sevio Routers, providing effective control and greater transparency over accesses.

The Audit section is accessible to Owners and Admins.

ActionBar

Download Data List

Downloads a.csv file containing detailed information about access sessions, including Device, Operator, Workstation, session duration, VPN type used, destination IP address, and destination Ports.

Search Filters

Allows users to apply filters to refine their search results:

Date - display sessions within a specific date range.
Workstation - select sessions associated with a specific Workstation.
Service Tag - quickly locate sessions related to a specific Device.
Session status - Filter sessions by connection status, such as started, ended, or active.

Audit List

	Connection	Indicates the type of connection used. R (Realm) - monitors direct access to the Device. L2 (Layer 2) - records traffic to a specific Device.
	Workstation	Identifies the Workstation used to log in. Clicking on this parameter provides additional details about the Operator associated with the Workstation.
	Device	Unique code (Service Tag) of the Device to which the Workstation is connected. Clicking on the Service Tag displays the parameters of the Router.
	Traffic	Displays the time range of the session, from start to end. Sessions that are still active are labeled "in progress".
	Duration	Calculates and displays the total duration of the session.
	Destination	Shows the IP address of the Destination Device. Parameter available only for the VPN Realm connection.
	Port	Indicates the Port involved in the connection. Click to view a full list of ports when multiple are involved. Parameter available only for the Realm VPN connection.

In case of a limited view, clicking will reveal all the data in the Audit List.

Data normalization

Data normalization is set to 30 minutes.
If no traffic is detected within 30 minutes of the last recorded entry, the session is automatically closed and the end date is set to the last detected event.

Sessions are classified as follows:

Ongoing - less than 30 minutes have passed since the last event.
Stopped - more than 30 minutes have passed since the last event.

L2 connections already provide precise connection and disconnection timestamps. Therefore, data normalization is only applied to Realm VPN connections.

Session history

The system keeps a record of session history for the past 15 days, after which older records are overwritten.