Currently when an authorized user clicks shutdown for a port or interface there is no auditing of that event unless the devices responds that the attempt was successful. If the users attempts to perform that action on an uplink or management interface the device no longer responds. There should be an audit log entry as soon as the user tries to shutdown the port.
