System Tasks

Overview

Some platform actions require background processing and may take time to complete, especially in large environments. Instead of processing these operations synchronously, the system creates a System Task and handles the task asynchronously.

This approach ensures:

• The user interface remains responsive.
• Large-scale updates do not block other operations.
• Long-running tasks (such as policy recalculations or external integrations) are processed reliably.
• Progress and completion status can be tracked.

When an eligible action is triggered:

1. A System Task is created.
2. The task enters a processing state (for example, Pending or In Progress).
3. The associated background job executes.
4. The System Task is updated to a final state such as Completed, Failed, or Cancelled.

Administrators can use the System Tasks page under the Monitor tab to view progress and verify completion of system changes.

This document lists the actions that generate background jobs and describes, at a high level, what those jobs perform.

---

1. Asset-Related Actions

Action	Background Job Triggered	What the Job Does
Add Asset	Asset Evaluation Job	Evaluates the new asset and applies relevant policies
Update Asset	Asset Recalculation Job	Re-evaluates policies and configuration for the updated asset
Delete Asset	Asset Cleanup Job	Removes the asset and associated configurations
Calculate Asset State	State Calculation Job	Recomputes asset state and risk posture
Asset Metrics	Metrics Aggregation Job	Updates asset-related metrics

2. Tag & Policy Actions

Action	Background Job Triggered	What the Job Does
Add / Modify Tag Rule	Rule Evaluation Job	Evaluates tag rule changes and updates affected assets
Add Tag-Based Policy	Policy Generation Job	Generates policy rules based on tags
Modify Policy Assignment	Policy Update Job	Updates asset-to-policy assignments
Delete Tag-Based Policy	Policy Cleanup Job	Removes associated policy rules
Update / Delete Tag	Tag Propagation Job	Updates or removes tag references across assets
Refresh Inbound Policy	Policy Refresh Job	Refreshes inbound policies for affected assets
Recalculate Segments	Signature Recalculation Job	Updates segment classification logic

3. Template Actions

Action	Background Job Triggered	What the Job Does
Edit Template	Template Update Job	Applies template changes across assigned assets
Assign Template	Bulk Assignment Job	Assigns template to multiple assets
Unassign Template	Bulk Unassignment Job	Removes template from multiple assets
Evaluate Template Rules	Template Evaluation Job	Re-evaluates template rule logic

4. Named Network Actions

Action	Background Job Triggered	What the Job Does
Assign / Unassign Named Network	Network Assignment Job	Updates network association for assets
Add / Remove Network Range	Network Range Update Job	Modifies IP ranges within a named network
Delete Named Network	Network Cleanup Job	Removes network and related references
Named Network Cleanup	Overlap Cleanup Job	Resolves overlapping network definitions

5. Integration & Synchronization Actions

Action	Background Job Triggered	What the Job Does
SCIM Pull	Directory Sync Job	Synchronizes user/group data
Integration Sync	Integration Sync Job	Synchronizes data with external systems
Microsoft Defender Sync	Defender Sync Job	Syncs host and group data
SentinelOne Sync	Sentinel Sync Job	Syncs host and group data
Netskope Sync	Private App Sync Job	Syncs private app information
Disable EDR / Deactivate	EDR Deactivation Job	Disables EDR integration processing

6. CrowdStrike Integration Actions

Action	Background Job Triggered	What the Job Does
CrowdStrike Host/Group Sync	Host/Group Sync Job	Synchronizes host and group data
CrowdStrike Firewall Host Group Members Sync	Firewall Membership Sync Job	Synchronizes host membership within firewall groups (Crowdstrike native mode)
CrowdStrike Firewall Policy Sync	Firewall Policy Sync Job	Synchronizes firewall policies (Crowdstrike native mode)
CrowdStrike Firewall Host Group Delete	Firewall Host Group Cleanup Job	Removes firewall host group mappings
CrowdStrike Deactivation	EDR Deactivation Job	Disables CrowdStrike integration processing

7. Scheduler & Reporting Actions

Action	Background Job Triggered	What the Job Does
Add Scheduled Job	Scheduler Job	Creates and schedules background execution
Finalize Report	Report Finalization Job	Completes report generation

8. Authentication & Access Actions

Action	Background Job Triggered	What the Job Does
Enable / Disable User Groups	Access Update Job	Updates group-based access control
Delete Identity Provider	IDP Cleanup Job	Removes identity provider configuration
Update User Access	Access Recalculation Job	Re-evaluates user access permissions

9. Other System Actions

Action	Background Job Triggered	What the Job Does
Update Network Map	Network Map Rebuild Job	Rebuilds traffic topology map
Port Categorization	Port Classification Job	Reclassifies ports based on usage
Flow Collector Sync	Flow Sync Job	Synchronizes flow collector data
Decommission Service	Decommission Job	Performs cleanup of deprecated services
Disable Block Malicious IPs	Security Update Job	Updates blocking behavior

---

How to Track Progress

Customers can monitor:

• System tasks
• Status (Pending, In Progress, Completed, Failed, Cancelled)
• Completion timestamp
• Retry status (if applicable)

---

Important Notes

• Some bulk actions may create multiple background tasks.
• Large environments may take longer to complete.
• External integration jobs depend on third-party API responsiveness.