Video Recording Audit

Scenarios

Each time an operation is finished, a historical session is generated to record the specific operations performed by the operator. Auditors can view these historical sessions to check whether operators performed any non-compliant operations during the O&M process.

The entire process of O&M personnel logging in to managed resources through the bastion host is recorded as video recordings. Auditors can download and play them in just a few clicks.

Precautions

• Sensitive data may exist in the video files to be audited. Exercise caution when checking these files to prevent information leaks. You are advised to enable the O&M log anonymization configuration to anonymize sensitive information in video files. For details, see Anonymizing O&M Logs.
• The total duration and playable duration of a downloaded video file may be different because the logout time and last operation time are different.
  • The total duration starts from the time when an operator logs in to a resource to the time they log out of the resource.
  • The playable duration starts from the time an operator logs in to a resource to the time the last session is completed.

Notes and Constraints

For details about the resource types that support video audit, see Audit Formats.

Prerequisites

The role you belong to has the management permission for the History Session module. For details about how to check the permissions of each role, see Role.

Playing Back a Historical Session Video Recording Online

1. Log in to your bastion host system.
2. In the navigation pane on the left, choose Audit > History Session to go to the historical session list page.
   Figure 1 Historical session list
   

3. Click Play in the Operation column of the historical session you want to audit.
4. On the left of the session window, you can view the entire process of the historical session. For details about the functions of each button, see Table 1.
   Figure 2 Playing the recording of a historical session
   

   Table 1 Description of the window for playing the recording of a historical session

   No.	Parameter	Description
   ①	Play/Pause	Plays or pauses the current session recording.
   ②	Previous/Next	Switches to the previous or next historical session for playback.
   ③	Skip Idle	It is disabled by default. If Skip Idle is enabled, only the content containing operations is played.
   ④	Speed	Click 1X Speed and select a playback speed. You can select 1X Speed, 2X Speed, 4X Speed, 8X Speed, or 16X Speed.
   ⑤	Screenshot	Click to generate a screenshot in .png format.
   ⑥	Playlist	Open or close the playlist. Click to expand the playlist on the right of the session window. You can then select a historical session to play back its video recording. Enter a login name or account name in the search box to search for a historical session. Click the target session to play its video recording immediately.
   ⑦	Full screen	Displays the window in full screen.

5. On the right of the session window, you can view the resource account information, O&M operation information, O&M operation command records, file transmission records, users participating in the session, and users who joined real-time monitoring of the current session.

Downloading a Historical Session Video Recording

Historical session video recordings are cached in the system and use the system storage space. To save system storage space, download video recordings and save them locally.

1. Log in to your bastion host system.
2. In the navigation pane on the left, choose Audit > History Session to go to the historical session list page.
   Figure 3 Historical session list
   

3. In the Operation column of the target historical session, click Download.
4. In the displayed dialog box, enter the login password of the logged-in user and click OK.
   • After the password verification is successful, click Go to Download Center. On the Download Task tab, download the session video file (in .zip format) to a local PC.
   • If the password fails the verification, enter the correct password as prompted. Otherwise, the session video cannot be downloaded.

Playing a Historical Session Video Recording Locally

Historical session video recordings downloaded to a local PC can be played only using a local player.

1. Log in to your bastion host system.
2. Click in the upper right corner to go to the download center.
3. On the Common Tools tab, download a local player.
4. After installing and opening a local player, drag the downloaded session video file (in .zip format) to the playback window to play the video recording.