Ace the WatchGuard Endpoint Security 2026 Test – Defend and Dominate Your Future!

Logging user sessions and actions in the management UI is about creating a complete trail of who did what and when. This is the function of User Audit Logs. They capture admin and user activity within the management console—logins, policy changes, configuration edits, data exports, permission adjustments, and other actions—along with timestamps, the user identity, and often the source IP or device. This audit trail is essential for accountability, troubleshooting, and security/compliance investigations because it shows exactly which user performed which action and what the result was.

Other features focus on protecting endpoints or controlling hardware access rather than recording UI activity. Endpoint Detection and Response tracks security events on the devices themselves; Antivirus Protection logs malware detections and remediation; Device Control governs which peripherals can connect. None of these center on documenting user actions inside the management interface, which is why the audit logs option is the best fit.