Access Logs

Access Logs lists every SSH attempt through your gateways: who tried, where, and what happened. The page is titled SSH Access Log.

Choose Switch product → PAM and select Access Logs in the sidebar.

Stats

The top of the page shows:

Stat	Shows
Attempts	All attempts in the time range
Approved	Attempts that opened a session
Denied or refused	Attempts that did not
Live now	Sessions open right now

Column	Shows
Time	When the attempt started
Operator	The person who connected
Target	The account and endpoint
Gateway	The gateway used
Outcome	What happened (see below)
Length	How long the session lasted. Click the play icon to watch the recording

Filter by Operator, Target, Gateway, Outcome and Time range. The default time range is Last 24 hours.

Outcome	Meaning
Approved	The push was approved and the session opened
Denied	The push was denied, or a policy denied the attempt
Refused	No policy granted the attempt, or a limit was reached
No answer	The push was not answered in time
Failed	The session could not be opened
Live now	The session is still open

note

The operator sees the same message for every refusal. Access Logs is where you find the actual outcome.

Click a row to open its drawer:

Section	Shows
Timeline	Each step of the attempt, in order
Details	Source IP, Key, Policy, Session and Decision
Recordings	The session's recordings. Click one to play it