Module - Security Auditor

Introduction

Overview

Security Auditor is an Ignition Gateway module that helps administrators review selected Gateway activity, monitor configured privileged access, prepare audit reports, and apply retention to selected audit records.

The module works within an Ignition Gateway environment. It provides Gateway pages for configuration and reporting, then records relevant activity as it occurs. It is designed to supplement existing Ignition administration and security practices, not replace them.

What problem it solves

Gateway administrators can need a consolidated view of user/session activity, project changes, and privileged-role assignments. Security Auditor provides a module-local way to observe this information, review it through the Gateway interface, and use it in operational reporting.

It also provides administrator-configured responses when a user holds a monitored privileged role without being included in the approved user list.

Key benefits

  • Observes selected classic client, Perspective, and Gateway web-session activity.

  • Records detected project resource changes and project-save activity.

  • Provides user-access, session, and project-change reporting views.

  • Supports configurable privileged-role monitoring and notification.

  • Can apply administrator-selected automated responses to a detected privileged-role violation.

  • Supports report delivery through configured external channels.

  • Supports retention of selected audit records, with an optional protected archive before removal.

  • Offers a privacy-oriented display option that reduces exposure of usernames and IP addresses in displayed and exported information.

Target audience

Security Auditor is intended for:

  • Ignition Gateway administrators.

  • System integrators and SCADA developers.

  • Automation and maintenance engineers.

  • IT/OT personnel responsible for Gateway operations.

  • Authorized support and operations teams.

The module does not provide custom Perspective components, Vision components, scripting functions, tag providers, or a separate client application.


Last updated: