All,
I'm trying to figure out how to keep track of SEC user logs. When I say users I mean the users I give access to the sophos console itself. I want to be able to track when a user cleans up a threat or makes a policy change. I read up on the auditing feature (which I currently have disabled). Is that what I'm looking for? From what I was reading it just looked like data on the events and users/machines related to sophos evenets and not so much the actual "admins" performing actions in the SEC. Does anyone currently do this with their SEC implementation?
Thank You
This thread was automatically locked due to age.
