Federal Information Security Modernization Act (FISMA)
Use the IBM® QRadar® FISMA Content Extension to closely monitor your deployment for FISMA compliance.
Important: To avoid content errors in this content extension, keep the associated DSMs
up to date. DSMs are updated as part of the automatic updates. If automatic updates are not enabled,
download the most recent version of the associated DSMs from IBM Fix Central
(https://www.ibm.com/support/fixcentral).
IBM Security QRadar FISMA Content Extension V.1.0.1
Saved searches are now shared by default. All saved searches are now in groups.
IBM Security QRadar FISMA Content Extension V.1.0.0
The following building blocks are included in IBM Security QRadar FISMA Content Extension V.1.0.0.
- BB:CategoryDefinition: Authentication Failures
- BB:CategoryDefinition: Authentication Success
The following reports are included in IBM Security QRadar FISMA Content Extension V.1.0.0.
- FISMA Daily Successful Login Attempts
- FISMA Daily Unsuccessful Logins Summary
- FISMA Daily Unsuccessful Mail Logins
- FISMA Daily Unsuccessful Mail Logins by Network Group
- FISMA Daily Unsuccessful Misc. Logins
- FISMA Daily Unsuccessful Misc. Logins by Network Group
- FISMA Daily Unsuccessful SSH Logins
- FISMA Daily Unsuccessful SSH Logins by Network Group
- FISMA Daily Unsuccessful Telnet Logins
- FISMA Daily Unsuccessful Telnet Logins by Network Group
- FISMA Daily Unsuccessful Web Services Logins
- FISMA Daily Unsuccessful Web Services Logins by Network Group
- FISMA Weekly Successful Login Attempts
- FISMA Weekly Unsuccessful Logins Summary
- FISMA Weekly Unsuccessful Mail Logins
- FISMA Weekly Unsuccessful Mail Logins by Network Group
- FISMA Weekly Unsuccessful Misc. Logins
- FISMA Weekly Unsuccessful Misc. Logins by Network Group
- FISMA Weekly Unsuccessful SSH Logins
- FISMA Weekly Unsuccessful SSH Logins by Network Group
- FISMA Weekly Unsuccessful Telnet Logins by Network Group
- FISMA Weekly Unsuccessful Web Services Logins
- FISMA Weekly Unsuccessful Web Services Logins by Network Group
- Remote Access Activity Summary
- Top Users by Remote Access Activity
The following saved searches are included in IBM Security QRadar FISMA Content Extension V.1.0.0.
- Login Failures By Low Level Category
- Login Failures by User
- Mail Service Login Failures
- Mail Service Login Failures by Network
- Misc. Login Failures
- Misc. Login Failures by Network
- Remote Access Failures (VPN and Others)
- Remote Access Success (VPN and Other)
- SSH Login Failures
- SSH Login Failures TopN Users
- SSH Login Failures by Network
- Successful Logins by Network
- Telnet Login Failures
- Telnet Login Failures by Network
- Top Users by Failed Misc. Logins
- Top User by Mail Service Login Failure
- Top Users by Successful Logins
- Web Services Login Failures
- Web Services Login Failures by Network