Gramm-Leach-Bliley Act (GLBA)

Use the IBM® QRadar® GLBA Content Extension to closely monitor your deployment for GLBA compliance.

Important: To avoid content errors in this content extension, keep the associated DSMs up to date. DSMs are updated as part of the automatic updates. If automatic updates are not enabled, download the most recent version of the associated DSMs from IBM Fix Central (https://www.ibm.com/support/fixcentral).

IBM Security QRadar GLBA Content Extension V.1.0.1

Saved searches are now shared by default. All saved searches are now in groups.

IBM Security QRadar GLBA Content Extension V.1.0.0

The following building blocks are included in IBM Security QRadar GLBA Content Extension V.1.0.0.

  • BB:CategoryDefinition: Authentication Failures
  • BB:CategoryDefinition: Authentication Success

The following reports are included in IBM Security QRadar GLBA Content Extension V.1.0.0.

  • Daily Top IPs for Blocked Spam
  • Daily Top Targeted IPs
  • Daily Top Virus Sources and Destinations
  • GLBA Daily Successful Login Attempts
  • GLBA Daily Unsuccessful Logins Summary
  • GLBA Daily Unsuccessful Mail Logins by Network Group
  • GLBA Daily Unsuccessful Misc. Logins
  • GLBA Daily Unsuccessful Misc. Logins by Network Group
  • GLBA Daily Unsuccessful SSH Logins
  • GLBA Daily Unsuccessful SSH Logins by Network Group
  • GLBA Daily Unsuccessful Telnet Logins
  • GLBA Daily Unsuccessful Telnet Logins by Network Group
  • GLBA Daily Unsuccessful Web Services Logins
  • GLBA Daily Unsuccessful Web Services Logins by Network Group
  • GLBA Unsuccessful Mail Logins
  • GLBA Weekly Successful Login Attempts
  • GLBA Weekly Unsuccessful Logins Summary
  • GLBA Weekly Unsuccessful Mail Logins
  • GLBA Weekly Unsuccessful Mail Logins by Network Group
  • GLBA Weekly Unsuccessful Misc. Logins
  • GLBA Weekly Unsuccessful Misc. Logins by Network Group
  • GLBA Weekly Unsuccessful SSH Logins
  • GLBA Weekly Unsuccessful SSH Logins by Network Group
  • GLBA Weekly Unsuccessful Telnet Logins by Network Group
  • GLBA Weekly Unsuccessful Web Services Logins
  • GLBA Weekly Unsuccessful Web Services Logins by Network Group
  • Monthly Top IPs for Blocked SPAM
  • Remote Access Activity Summary
  • Top Users by Remote Access Activity
  • Weekly Top IPs for Blocked Spam
  • Weekly Top Virus Sources and Destinations

The following saved searches are included in IBM Security QRadar GLBA Content Extension V.1.0.0.

  • Login Failures By Low Level Category
  • Login Failures by User
  • Mail Service Login Failures
  • Mail Service Login Failures by Network
  • Misc. Login Failures
  • Misc. Login Failures by Network
  • Remote Access Failures (VPN and Others)
  • Remote Access Success (VPN and Other)
  • SSH Login Failures
  • SSH Login Failures TopN Users
  • SSH Login Failures by Network
  • Successful Logins by Network
  • Telnet Login Failures
  • Telnet Login Failures by Network
  • Top Users by Failed Misc. Logins
  • Top User by Mail Service Login Failure
  • Top Users by Successful Logins
  • Web Services Login Failures
  • Web Services Login Failures by Network