The Audit Trail page displays a chronological log of actions taken by administrators in the Cato Management Application (CMA). For example, the log contains entries for additions, deletions, and edits of items such as rules, configurations, settings, and more. The page displays the previous and new values for a change.
You can see information about CMA admin logins on the Home > Events page. Use the sub-type Cato Management Application.
Showing the Audit Trail Page

In the Audit Trail page, you can see information about actions taken by administrators during a specific time period. You can use the search bar to filter the Audit Trail by modules, types, administrators, and actions.
For some policies, such as the Internet Firewall and WAN Firewall, you can view the value of a field before and after it was changed.
![]()
To show the Audit Trail for CMA admins:
From the navigation menu, click Account > Audit Trail.
Filtering and Sorting the Audit Trail
You can filter the Audit Trail page by using the time range filter, selecting a Custom Preset filter, manually creating a filter, or using a natural language search. The Audit Trail page supports showing data for the previous 12 months and you can view up to 3 months of items at one time. The Audit Trail is not part of Cato's Data Lake.
For more information, see the following articles: