APPENDIX 2: Job Descriptions for Job Scheduler

AAPM Triggers

Creating AWS Device Import JobsCreating AWS Device Import Jobs

Creating Azure Device Import JobsCreating Azure Device Import Jobs

Deletes DB backup files older than one day from folders that are configured with the following system parameters:

·       aioc.backup.uploaddir

·       aioc.backup.tempdir

These files are stored temporarily to upload to the FTP server, this is a cleaning job for failed uploads

This job sends bulk mails (User group change, black key, and White key execution notifications)

This job collects data from cloud service providers (e.g., AWS, Azure, GCP) and presents them under different formats in CIEM screens.

This job executes scheduled auto device discovery tasks

Enable External Device Database Import JobEnable External Device Database Import Job

Checks devices' maintenance mode definitions and marks devices as maintenance or operation modes so that SSH Proxy applies policies according to device’s mode and selects the policy group accordingly.

Creating GCP Device Import JobsCreating GCP Device Import Jobs

This is a job enabled by default and used for closing the sessions that passed the idle session timeout thresholds

This job adds AD users automatically based on LDAP configurations. If the PAM server is multi-tenant environment, and if this job is executed on the access-on-behalf-enabled tenant environment, both host’s and the tenant’s LDAP configurations are used, whereas if this job is executed on the host environment, only host’s LDAP configurations are used.

Adding Users AutomaticallyAdding Users Automatically

Adding Devices AutomaticallyAdding Devices Automatically

Linux Audit ReportLinux Audit Report

Deletes tenant’s logs older than the value defined for the logRetentionDays system parameter for each tenant.

This is a job enabled by default and used for sending email notifications for several purposes.

Sending MFA QR Code to UsersSending MFA QR Code to Users

Editing New User Check CronjobEdit New User Check Cronjob

The job rotates the passwords of the accounts that are due to be changed. Runs once per minute by default.

The job that sends mail to the user before the password change period based on the password.change.reminder.day parameter in the Vault configuration.

The job checks the validity of the passwords of the accounts periodically

Future Date ReservationFuture Date Reservation

This is a job enabled by default and used for capturing the on-screen characters in RDP/VNC sessions.

Creates alarms according to alarm definitions and diagnostic values.

Deletes closed alarms older than six months.

Sends notifications about executed commands in SSH Proxy, sends command and connection approval notifications. Enabling Push Notifications for Mobile ApplicationEnabling Push Notifications for Mobile Application

Legacy Threat Analytics

Legacy Threat Analytics

Schedule DiscoverySchedule Discovery

Enabling Push Notifications for Mobile Application

Retrieves suitable Service Now tickets and runs matched workflows (Used only with Service Now ticketing system integration)

Sends scheduled reports on Reporting module.

Seals old log records and the log records created by TACACS or other applications.

This job automatically scans and completely deletes the removed tenants from the Web GUI.

Once the tenant is removed from the Web GUI,“is_deleted” valueof the tenant is set to YES, and “deletion time” is set to "now".

TenantCleanJob checks if there are any tenants whose deletion time has passed by 2 months, and if there are, it completely removes that tenant (both from t_tenant and from its schema).

This job keeps track of the regular heartbeat messages sent by the connector nodes and sets the tunnel status as FAILED in case three consecutive heartbeat messages (this number is specified in the “connector.heartbeat.check.interval” system parameter) do not arrive. There will be no traffic on the failed tenant connector node unless its status turns active again.

This job copies the newly defined outbound connector node to all other tenants and replicated environments.

Checks local users to lock inactive users and expired temporary users, unlock temporarily locked/suspended users, and mark users with expired passwords

Notifying Inactive Users Before LockNotifying Inactive Users Before Lock

Windows Audit ReportWindows Audit Report

Executes scheduled workflows in Privileged Task Automation Manager module

This job automatically converts session recordings to video on a scheduled basis.

Retrieves the Risk scores from VirusTotal for EPM discovered applications. Check details on Agent Reference Guide.

Device counts on Application Catalog page. Check details on Agent Reference Guide.