mdx: 서버 정책과 감사 로그 문서를 동기화합니다

src/content/en/administrator-manual/audit/general-logs/activity-logs.mdx

@@ -51,6 +51,10 @@ Administrator > Audit > General > Activity Logs > Activity Logs Deta
     1. You can check not only actions directly caused by administrators, but also automatic system actions derived from them.
     2. Action logs displayed in Related Logs are also kept as individual logs.
 
+<Callout type="info">
+When **Server Access Request Default Settings** in SAC General Configurations are changed, you can view the before and after values for Session Recording and Session Recording Max Size (MB) in Affected Data.
+</Callout>
+
 <Callout type="info">
 From 11.3.0, a "Changes Only" checkbox has been added to the Activity Logs detail view (Drawer) so you can filter to see only changed items.
 Also, empty values are displayed as "&lt;null&gt;" instead of “-(dash)”.

src/content/en/administrator-manual/audit/server-logs/access-control-logs.mdx

@@ -80,19 +80,24 @@ Administrator > Audit > Servers > Access Control Logs > Access Contr
     9.  **Expiration Date**  : Permission grant expiration date (scheduled revocation date)
     10.  **Account**  : Server account
     11.  **Action By**  : Administrator name or System who performed the permission grant/revocation
-        1. When permissions are granted through Workflow, an Access Request link appears and opens the corresponding Request page in a new window.
 2. The bottom lists policies applied to the granted/revoked Permission:
     1. Access Control related logs - Policy
         1.  **Access Time**  : Access allowed time
         2.  **Weekday Access Allow**  : Access allowed weekdays
         3.  **IP Addresses**  : Access allowed IP addresses
         4.  **Command Audit**  : Command recording status
-        5.  **Proxy Usage**  : Access through Proxy (Agent) availability
-        6.  **Max Sessions**  : Maximum number of access sessions
-        7.  **Session Timeout (minutes)**  : Session timeout time setting
-        8.  **Protocols**  : Access protocols
-        9.  **Command Template**  : Applied prohibited command set
+        5.  **Session Recording**: Whether session recording was enabled when the Permission was granted. (Supported from 11.5.8 and 11.6.6)
+        6.  **Session Recording Max Size (MB)**: Maximum chunk size of the session recording file applied when the Permission was granted. (Supported from 11.5.8 and 11.6.6)
+        7.  **Proxy Usage**  : Access through Proxy (Agent) availability
+        8.  **Require Privilege**  : Whether privilege elevation is required
+        9.  **Allow Local Port Forwarding**  : Whether local port forwarding is allowed (Supported from 10.3.0)
+        10.  **Allow RDP Clipboard**  : Whether RDP clipboard use is allowed (Supported from 11.5.8 and 11.6.6)
+        11.  **Max Sessions**  : Maximum number of access sessions
+        12.  **Session Timeout (minutes)**  : Session timeout time setting
+        13.  **Protocols**  : Access protocols
+        14.  **Command Template**  : Applied prohibited command set
     2. Whitelist related logs - Whitelisted Commands
         1.  **Keyword**  : Exception handling keyword
         2.  **RegEx**  : Exception handling regular expression
         3.  **Whitelist Expiration Date**  : Exception handling expiration date
+

src/content/en/administrator-manual/audit/server-logs/session-logs.mdx

@@ -3,13 +3,19 @@ title: 'Session Logs'
 confluenceUrl: 'https://querypie.atlassian.net/wiki/spaces/QM/pages/544014927/Session+Logs'
 ---
 
+import { Callout } from 'nextra/components'
+
 # Session Logs
 
 ### Overview
 
 Records server access sessions managed by the organization.
 Administrators can monitor users' work execution history within servers through video playback.
 
+<Callout type="info">
+Starting with 11.5.8 and 11.6.6, the Session Recording option is available, and session recording logs are generated only when this option is set to On.
+</Callout>
+
 ### Viewing Session Logs
 
 <figure data-layout="center" data-align="center">

src/content/en/administrator-manual/servers/sac-general-configurations.mdx

@@ -85,7 +85,7 @@ Therefore, even if you are within the displayed IP range, final access may be de
 *  **Password Provisioning :** Setting for using password provisioning
     * Periodically change passwords for server accounts of registered servers
     * When set to On, the following changes occur:
-        * In [Managing Servers as Groups | 3.-Registering-Accounts](connection-management/server-groups/managing-servers-as-groups#3-registering-accounts), account selection options for password provisioning are added
+        * In [Managing Servers as Groups | 3.-Registering-Accounts](connection-management/server-groups/managing-servers-as-groups#3.-accounts-%eb%93%b1%eb%a1%9d%ed%95%98%ea%b8%b0), account selection options for password provisioning are added
         * [Password Provisioning](server-account-management/password-provisioning) menu is activated and Password change Jobs can be registered
         * [Account Management](server-account-management/account-management) menu is activated and provides account list lookup functionality for servers managed by QueryPie
 *  **Allow RDP Connection without Server Agent :**  Setting for allowing access to Windows Servers without RDP Server Agent installed
@@ -106,7 +106,7 @@ When accessing Windows Servers without RDP Server Agent installed, the following
         * Provisioning accounts and One Time Accounts can be registered in the system.
         * When accessing servers, the system automatically creates temporary accounts on the server.
 
-#### Default Policy Settings for Server Permission Requests
+#### Server Access Request Default Settings
 
 Manage server access policies applied when assigning Direct Permissions through Workflow requests.
 
@@ -122,7 +122,10 @@ For more details, please refer to [Requesting Server Access Request](../../user-
 </Callout>
 
 <figure data-layout="center" data-align="center">
-<img src="/administrator-manual/servers/sac-general-configurations/Screenshot-2025-07-22-at-3.09.36-PM.png" alt="Screenshot-2025-07-22-at-3.09.36-PM.png" width="729" />
+<img src="/administrator-manual/servers/sac-general-configurations/image-20260804-071014.png" alt="Admin &gt; Servers &gt; General &gt; Configurations &gt; Server Access Request Default Settings" width="709" />
+<figcaption>
+Admin &gt; Servers &gt; General &gt; Configurations &gt; Server Access Request Default Settings
+</figcaption>
 </figure>
 
 * Maximum Access Duration : Set the maximum usage period for server access permissions
@@ -138,6 +141,9 @@ For more details, please refer to [Requesting Server Access Request](../../user-
 *  **Proxy Usage**: Whether to allow proxy access through Agent for this permission
 *  **Allow Local Port Forwarding**: Whether to allow Port Forwarding from Client
     * Used when using Port Forwarding such as VSCode
+*  **Allow RDP Clipboard**: Whether to allow clipboard use in RDP sessions
+*  **Session Recording**: Sets whether session recording is enabled by default for server access Permissions granted through Server Access Request. The default is On. When set to Off, the session recording option for Permissions created by the request is set to Off. (Supported from 11.5.8 and 11.6.6)
+*  **Session Recording Max Size**: Sets the maximum chunk size of session recording files in MB. The default is 100 MB, and you can enter a value from 10 MB to 1024 MB. This item cannot be configured when Session Recording is Off. (Supported from 11.5.8 and 11.6.6)
 *  **Max Sessions**: Maximum concurrent connections per server
 *  **Session Timeout**: Server session timeout criteria time (minutes)
 *  **Show Server Groups in Workflow if Assigned as Member :**  When checked, only server groups assigned as Server Group Members are displayed when users apply for Server Access Request

src/content/en/administrator-manual/servers/server-access-control/access-control/granting-and-revoking-permissions.mdx

@@ -50,7 +50,7 @@ If more than 1000 servers are registered in a single server group, add servers t
 #### 3. <Badge color="blue">Step 2</Badge>: Set access policies for the selected servers.
 
 <figure data-layout="center" data-align="center">
-<img src="/administrator-manual/servers/server-access-control/access-control/granting-and-revoking-permissions/Screenshot-2025-07-27-at-5.28.54-PM.png" alt="Administrator &gt; Servers &gt; Server Access Control &gt; Access Control &gt; Details &gt; Grant Permissions Step 2" width="760" />
+<img src="/administrator-manual/servers/server-access-control/access-control/granting-and-revoking-permissions/3.-Permissions-부여-및-회수하기.png" alt="Administrator &gt; Servers &gt; Server Access Control &gt; Access Control &gt; Details &gt; Grant Permissions Step 2" width="760" />
 <figcaption>
 Administrator &gt; Servers &gt; Server Access Control &gt; Access Control &gt; Details &gt; Grant Permissions Step 2
 </figcaption>
@@ -60,30 +60,30 @@ Administrator &gt; Servers &gt; Server Access Control &gt; Access Control &gt; D
 2. Each policy item is as follows:
     1.  **`{n}` Server(s) selected**: This item displays the number of Servers selected in <Badge color="blue">Step 1</Badge> x the number of Accounts. Clicking shows each item in list format.
     2.  **Set Permissions by Minute**: When this option is selected, server access permissions can be set in minutes. When the checkbox is selected, the following setting items are activated.
-        1. Start Trigger : Select the permission grant start condition
+        1. **Start Trigger** : Select the permission grant start condition
             1. Access to the Server : Permissions are activated immediately when the user accesses the server. Regardless of server session maintenance, you can access the server for the specified period from the activation time.
             2. Grant : The timer starts immediately upon permission grant, and permissions are valid only for the specified period regardless of the user's actual access.
         2.  **Duration(Minutes)**: Enter the valid time in minutes for the permission.
     3.  **Expiration Date**: Set the access permission expiration date. Can be set up to a maximum of 1 year. (Default = 1 year later)
     4.  **Protocols**: Use the protocol to be used for server access.
     5.  **Command Template**: Set the command set that cannot be used after accessing the server. You can check the detailed conditions set by clicking Command Template Details below.<br/>*Limitation: (10.2.1) Only Command Templates set to Deny can be used in Grant Permissions.
-    6.  **Configure Whitelist**: Supports exception handling for specific commands in the process of controlling commands through Command Template. When the Configure Whitelist checkbox is checked, the following settings appear:
-        1.  **Commands**: Enter commands that need to be allowed.
-            1.  **Keyword**: Enter as keyword (ls, cat, etc.)
-            2.  **RegEx**: Enter as regular expression (^sudo\b[^&|;\n]*$, etc.)
-        2.  **Whitelist Expiration Date**: Specify a separate exception handling expiration date for the above commands.
-    7.  **Require Privilege**: When this option is activated, users must go through an approval process through Server Privilege Request workflow to access servers with that account. This is useful when temporarily allowing and managing access to high-privilege accounts such as administrator (Admin) accounts on Windows servers.
+    6.  **Configure Server Privilege**: Adds Server Privilege settings to apply to the Permission. When selected, you can configure the commands available through Server Privilege and the Privilege Expiration Date. For minute-based Permissions, you can also configure Privilege Start Trigger and Privilege Duration (Minutes).
+    7.  **Access Start Time**: Set the allowed access start time.
+    8.  **Access End Time**: Set the allowed access end time.
+    9.  **Access Weekday**: Set the days of the week when access is allowed.
+    10.  **IP Addresses**: Set the IP addresses allowed for access.
+    11.  **Command Audit**: Set whether to log commands used in sessions connected through this Permission.
+    12.  **Command Detection**: Set whether to detect prohibited commands within Script/Alias when they are called.<br/>*Limitation: (10.2.1) Only works in Bash Shell, commands that call other Scripts from Script are blocked
+    13.  **Session Recording**: Sets the session recording option for SSH, SFTP, TELNET, and FTP sessions associated with this Permission. The default is `On`. Actual session recording follows the combined result of all policies applied at connection time. (Supported from 11.5.8 and 11.6.6)
+    14.  **Session Recording Max Size (MB)**: Sets the maximum chunk size of session recording files in MB. The default is 100 MB, and you can enter a value from 10 MB to 1024 MB. This item is disabled when Session Recording is Off. (Supported from 11.5.8 and 11.6.6)
+    15.  **Proxy Usage**: Set whether to allow server access through QueryPie Agent with this Permission.
+    16.  **Require Privilege**: When this option is activated, users must go through an approval process through Server Privilege Request workflow to access servers with that account. This is useful when temporarily allowing and managing access to high-privilege accounts such as administrator (Admin) accounts on Windows servers.
         * When attempting to access with an account where this option is activated, the `Connect` button is disabled when accessing the server from the user dashboard, and a message is displayed indicating that an access permission request must be submitted.
         * The Require Privilege option can be applied to all accounts regardless of the server's OS type.
-    8.  **Access Start Time**: Set the allowed access start time.
-    9.  **Access End Time**: Set the allowed access end time.
-    10.  **Access Weekday**: Set the days of the week when access is allowed.
-    11.  **IP Addresses**: Set the IP addresses allowed for access.
-    12.  **Command Audit**: Set whether to log commands used in sessions connected through this Permission.
-    13.  **Command Detection**: Set whether to detect prohibited commands within Script/Alias when they are called.<br/>*Limitation: (10.2.1) Only works in Bash Shell, commands that call other Scripts from Script are blocked
-    14.  **Proxy Usage**: Set whether to allow server access through QueryPie Agent with this Permission.
-    15.  **Max Sessions**: Limit the number of concurrent sessions a user can have on a single server.
-    16.  **Session Timeout (minutes)**: Sessions are terminated if inactive for the entered time (minutes).
+    17.  **Allow Local Port Forwarding**: Allows clients connected through this Permission to forward local ports to the remote server. This is required for clients that use local port forwarding, such as VS Code Remote SSH. (Supported from 10.3.0)
+    18.  **Allow RDP Clipboard**: Sets whether clipboard redirection is allowed for RDP sessions connected through this Permission. When set to Disable, clipboard redirection is unavailable in the RDP session. (Supported from 11.5.8 and 11.6.6)
+    19.  **Max Sessions**: Limit the number of concurrent sessions a user can have on a single server.
+    20.  **Session Timeout (minutes)**: Sessions are terminated if inactive for the entered time (minutes).
 3.  Click the `Grant` button in the bottom right to complete permission grant.
 
 

src/content/en/administrator-manual/servers/server-access-control/policies/setting-server-access-policy.mdx

@@ -3,6 +3,8 @@ title: 'Setting Server Access Policies'
 confluenceUrl: 'https://querypie.atlassian.net/wiki/spaces/QM/pages/544381039'
 ---
 
+import { Callout } from 'nextra/components'
+
 # Setting Server Access Policies
 
 ### Overview
@@ -18,25 +20,32 @@ In addition, you can set the number of allowed sessions per user.
 *  **serverGroup**: Server group to allow access to
 *  **account**: Account registered in the server group
 *  **protocols**: Allowed protocols (as of 10.2, supports SSH, SFTP, TELNET, FTP, RDP)
-*  **commandRef**: Command template to apply when accessing
+*  **commandsRef**: Command template to apply when accessing
     * You can check the content of the selected Command Template by expanding the `Command Policy Detail` accordion
     * For creating and managing command templates, refer to [Command Templates](../command-templates)
     * When both Allow / Deny command templates are applied, Deny takes priority
 *  **accessTime**: Access allowed time
 *  **accessWeekday**: Access allowed days of the week
-*  **ipAddress**: Access allowed IP settings<br/>*When corresponding to Security &gt; Resource IP Access Control Configuration settings, only IPs within the allowed range are permitted access
+*  **ipAddresses**: Access allowed IP settings<br/>*When corresponding to Security &gt; Resource IP Access Control Configuration settings, only IPs within the allowed range are permitted access
 *  **commandAudit**: Whether to apply command auditing when accessing
 *  **commandDetection**: Whether to detect prohibited commands within Script and Alias when they are called<br/>*Limitation: (10.2.1) Only works in Bash Shell, commands that call other Scripts from Script are blocked
-*  **proxyUsage**: Whether to allow proxy access through Agent
+*  **sessionRecording**: Sets whether session recording is enabled. The default is `On(true)`. When multiple policies apply, session recording is enabled if any policy has this option set to `On(true)`. To disable session recording, set it to `Off(false)` in all matching policies. (Supported from 11.5.8 and 11.6.6)
+*  **sessionRecordingMaxSizeMb**: Sets the maximum chunk size of session recording files in MB. The default is `100`, and you can enter a value from 10 to 1024. When multiple policies apply, the smallest value is used. (Supported from 11.5.8 and 11.6.6)
+*  **useProxy**: Whether to allow proxy access through Agent
 *  **maxSessions**: Maximum concurrent connections per server
 *  **sessionTimeout**: Server session timeout criteria time (minutes)
-*  **requirePrivilege**: Whether privilege approval is required for server access<br/>*When this option is activated (Enable), the account must receive approval through the server privilege request (Server Privilege Request) workflow to access the server.
+*  **requirePrivilege**: Whether privilege approval is required for server access<br/>*When this option is activated (`Enable`), the account must receive approval through the server privilege request (Server Privilege Request) workflow to access the server.
+*  **allowLocalPortForwarding**: Allows clients to forward local ports to the remote server. The default is `Disable(false)`. Set it to `Enable(true)` for clients that use local port forwarding, such as VS Code Remote SSH.
+*  **allowClipboard** (**Allow RDP Clipboard**): Sets whether clipboard redirection is allowed for RDP sessions. The default is `true`; setting it to `false` blocks clipboard redirection in the RDP session. (Supported from 11.5.8 and 11.6.6)
 
+<Callout type="info">
+What is Clipboard Redirection?<br/>Clipboard Redirection is a Remote Desktop Protocol (RDP) feature that shares the clipboard between a local device and a remote Windows desktop session, allowing copied text or files to be pasted between them.
+</Callout>
 
-### Editing Policy Code
+#### Editing Policies in Editor Mode
 
 <figure data-layout="center" data-align="center">
-<img src="/administrator-manual/servers/server-access-control/policies/setting-server-access-policy/Screenshot-2025-07-27-at-5.40.59-PM.png" alt="Administrator &gt; Servers &gt; Server Access Control &gt; Policies &gt; List Details &gt; Go to Editor Mode" width="760" />
+<img src="/administrator-manual/servers/server-access-control/policies/setting-server-access-policy/image-20260804-101830.png" alt="Administrator &gt; Servers &gt; Server Access Control &gt; Policies &gt; List Details &gt; Go to Editor Mode" width="760" />
 <figcaption>
 Administrator &gt; Servers &gt; Server Access Control &gt; Policies &gt; List Details &gt; Go to Editor Mode
 </figcaption>