Audit log

Hi @nubira,

For your security audit, you can find the requested log entries within the Zyxel Nebula Control Center.

Here's how to access them:

• Log of configuration changes (e.g., firewall rules, user creation, or any other changes):

  • Navigate to the Organization-wide Management > Change Log section in Nebula. This section records manual changes made to configuration settings, such as SSID name changes, adjustments to radio settings, or add security policy.
  • Please note that the change log feature is typically available with a Pro organization license. For MSPs, an MSP-level changelog management is available with a Nebula MSP Pack license.
  • For changes related to firmware upgrades, you can check Site-wide > Monitor > Firewall > Event log.

• Login log (who logged into Nebula, when, and from where):

  • Nebula generally sends email notifications to users for new login activity, failed logins, or logins from unusual locations.
  • You can check the last access time on Organization-wide > Administrators.

To help us further investigate and provide more specific guidance, please provide the following information:

• Organization Name in Nebula.
• Site Name where these devices are located.
• Enable Zyxel Support Access in your Nebula console. This allows our support team to directly view your cloud environment configuration, significantly shortening troubleshooting time. You can do this by going to Help > Support Request and enabling "Invite Zyxel support as administrator".