Reference Guide

APPENDIX 2: Job Descriptions for Job Scheduler

Job Name
Description
AapmTriggerProcessJob
﻿AAPM Triggers﻿ 
AwsDeviceImportJob
﻿Creating AWS Device Import Jobs﻿ 
AzureDeviceImportJob
﻿Creating Azure Device Import Jobs﻿ 
BackupDeleteJob
Deletes DB backup files older than one day from folders that are configured with the following system parameters: 
•	aioc.backup.uploaddir
•	aioc.backup.tempdir 
These files are stored temporarily to upload to the SFTP server. This is a cleaning job for failed uploads.
BulkMailJob
This job sends bulk emails (User group change, black key, and White key execution notifications)
DeviceAutoDiscover
This job executes scheduled auto device discovery tasks. 
DeviceDatabaseImportJo
﻿Enable External Device Database Import Job﻿ 
DeviceOperationModeCheck
Checks devices' maintenance mode definitions and marks devices as maintenance or operation modes so that SSH Proxy applies policies according to the device’s mode and selects the policy group accordingly.
GcpDeviceImportJo
﻿Creating GCP Device Import Jobs﻿ 
idleSessionDeletion
This is a job enabled by default and used for closing the sessions that passed the idle session timeout thresholds.
LdapDataCollector
﻿Adding Users Automatically﻿ 
LdapDeviceImportJob
﻿Adding Devices Automatically﻿ 
LinuxAuditJob
﻿Linux Audit Report﻿ 
LogRetentionJob
Deletes tenant’s logs older than the value defined for the logRetentionDays system parameter for each tenant.
mailSender
This is a job enabled by default and used for sending email notifications for several purposes.
MFATokenEmailSendJob
﻿Sending MFA QR Code to Users﻿ 
SAPM_NewUserCheckJob
﻿Editing New User Check Cronjob﻿ 


SAPM_PasswordChangeJob
The job rotates the passwords of the accounts that are due to be changed. The default job frequency is one minute.
SAPM_PasswordChangeReminderJob
The job that sends mail to the user before the password change period based on the password.change.reminder.day parameter in the SAPM configuration
SAPM_PasswordCheckJob
The job checks the validity of the passwords of the accounts periodically.
SAPM_PasswordReservationJob
﻿Future Date Reservation﻿ 
SC_OcrProcessJob
This is a job enabled by default and used for capturing the on-screen characters in RDP/VNC sessions.
SCMonitoringCreateAlarmJob
Creates alarms according to alarm definitions and diagnostic values.
SCMonitoringDeleteAlarmJob
Deletes closed alarms older than six months.
ScPolicyNotifierJob
Sends notifications about executed commands in SSH Proxy, sends command and connection approval notifications.
ScSessionAlertsJob
﻿Threat Analytics﻿ 
ScSessionStatisticsJob
﻿Threat Analytics﻿ 
SDDSchedule
﻿Schedule Discovery﻿ 
SendPushMessageJob
﻿Enabling Push Notifications for Mobile Application﻿ 


Servicenow Ticket Control
Retrieves suitable Service Now tickets and runs matched workflows (Used only with Service Now ticketing system integration)
SupersetReportScheduleJob
Sends scheduled reports on the Reporting module.
TamperProofLogJob
Seals old log records and the log records created by TACACS or other applications.
TenantCleanJob
Fully deletes the tenants which are softly deleted more than two months ago.
TunnelHeartbeatCheckJob
Marks VPN tunnels as failed if there is no heartbeat record in the interval that can be configured with the “connector.heartbeat.check.interval” system parameter.
TunnelSetupJob
Creates VPN tunnels in all SC instances.
User Eligibility Check
Checks local users to lock inactive users and expired temporary users, unlock temporarily locked/suspended users, and mark users with expired passwords.
User Notification Before Loc
﻿Notifying Inactive Users Before Lock﻿ 
WindowsAuditJo
﻿Windows Audit Report﻿ 
WorkflowScheduler
Executes scheduled workflows in the Privileged Task Automation Manager module.
﻿

APPENDIX 1: System Config Manager Parameters

Job Name	Description
AapmTriggerProcessJob	AAPM Triggers
AwsDeviceImportJob	Creating AWS Device Import Jobs
AzureDeviceImportJob	Creating Azure Device Import Jobs
BackupDeleteJob	Deletes DB backup files older than one day from folders that are configured with the following system parameters: • aioc.backup.uploaddir • aioc.backup.tempdir These files are stored temporarily to upload to the SFTP server. This is a cleaning job for failed uploads.
BulkMailJob	This job sends bulk emails (User group change, black key, and White key execution notifications)
DeviceAutoDiscover	This job executes scheduled auto device discovery tasks.
DeviceDatabaseImportJo	Enable External Device Database Import Job
DeviceOperationModeCheck	Checks devices' maintenance mode definitions and marks devices as maintenance or operation modes so that SSH Proxy applies policies according to the device’s mode and selects the policy group accordingly.
GcpDeviceImportJo	Creating GCP Device Import Jobs
idleSessionDeletion	This is a job enabled by default and used for closing the sessions that passed the idle session timeout thresholds.
LdapDataCollector	Adding Users Automatically
LdapDeviceImportJob	Adding Devices Automatically
LinuxAuditJob	Linux Audit Report
LogRetentionJob	Deletes tenant’s logs older than the value defined for the logRetentionDays system parameter for each tenant.
mailSender	This is a job enabled by default and used for sending email notifications for several purposes.
MFATokenEmailSendJob	Sending MFA QR Code to Users
SAPM_NewUserCheckJob	Editing New User Check Cronjob
SAPM_PasswordChangeJob	The job rotates the passwords of the accounts that are due to be changed. The default job frequency is one minute.
SAPM_PasswordChangeReminderJob	The job that sends mail to the user before the password change period based on the password.change.reminder.day parameter in the SAPM configuration
SAPM_PasswordCheckJob	The job checks the validity of the passwords of the accounts periodically.
SAPM_PasswordReservationJob	Future Date Reservation
SC_OcrProcessJob	This is a job enabled by default and used for capturing the on-screen characters in RDP/VNC sessions.
SCMonitoringCreateAlarmJob	Creates alarms according to alarm definitions and diagnostic values.
SCMonitoringDeleteAlarmJob	Deletes closed alarms older than six months.
ScPolicyNotifierJob	Sends notifications about executed commands in SSH Proxy, sends command and connection approval notifications.
ScSessionAlertsJob	Threat Analytics
ScSessionStatisticsJob	Threat Analytics
SDDSchedule	Schedule Discovery
SendPushMessageJob	Enabling Push Notifications for Mobile Application
Servicenow Ticket Control	Retrieves suitable Service Now tickets and runs matched workflows (Used only with Service Now ticketing system integration)
SupersetReportScheduleJob	Sends scheduled reports on the Reporting module.
TamperProofLogJob	Seals old log records and the log records created by TACACS or other applications.
TenantCleanJob	Fully deletes the tenants which are softly deleted more than two months ago.
TunnelHeartbeatCheckJob	Marks VPN tunnels as failed if there is no heartbeat record in the interval that can be configured with the “connector.heartbeat.check.interval” system parameter.
TunnelSetupJob	Creates VPN tunnels in all SC instances.
User Eligibility Check	Checks local users to lock inactive users and expired temporary users, unlock temporarily locked/suspended users, and mark users with expired passwords.
User Notification Before Loc	Notifying Inactive Users Before Lock
WindowsAuditJo	Windows Audit Report
WorkflowScheduler	Executes scheduled workflows in the Privileged Task Automation Manager module.