9.1.2 Tracking User Activity and Session Metrics

Absolutely critical for security, compliance, performance monitoring, and even user experience optimization, user activity tracking and session metrics are presented in the Analytics module which provides visibility into who is accessing what, when, and how, which is essential for any remote access solution.

The Analytics module uses audit data to provide insights related to user activity and sessions:

• User activity dashboards (most active users, most accessed resources).

• Performance trends over time.

• Capacity planning insights (peak usage, average session duration).

• Compliance reports.

• Filtering and searching of audit trails.

Key Metrics and Activity Types

User Activity Data (What users do): available in the Sessions tab

1. Login/Logout Events:

   • Timestamp of login/logout.

   • User ID/Username.

   • Source IP address.

   • Authentication method used (e.g., AD, MFA, Passkey).

   • Success/failure of login attempt.

2. Resource Access Events: available in the Connections tab

   • Timestamp of access attempt.

   • User ID.

   • Success/failure of access.

   • Access profile used.

   • Duration of resource usage (Start/End time stamps).

3. File Operations: available in the File Transfers tab

   • Date and time

   • User ID

   • Source IP

   • Profile name

   • Action (file upload/download).

4. Browsers used to access the platform: in the Browsers tab

   • Client browser name and version

   • OS name and architecture version (e.g.: x32 or x64)

   • Total number of sessions initiated with a specific browser.

Session Metrics (Characteristics of the connection): available in the Sessions tab

1. Session Start/End Times:

   • Timestamp when the session was established and terminated.

   • Total session duration.

2. User Identity:

   • User ID/Username.

   • User group memberships.

Apart from data available in the Analytics module, an additional user activity tracking tool - the Session Recording module - captures a video-like recording of the user's interaction within the remote desktop or application. Mainly recommended for highly sensitive access, it provides irrefutable forensic evidence, helps with training, and enforces compliance.

Considerations

Before activating this add-on, make sure to disclose this info to the users and comply with existing privacy regulations.