FNMS Access Logs

[sibusison]

Does FNMS keep access logs to the suite? 

Who, and when they logged on?

Who tried to log on and failed?

The premise here is that we are required to adhere to governance requirements where the logging of Logon and Logoff events that appear to, by default, not be logged.

The thinking is that because FNMS is a web-based system relying on IIS for its Web publishing, it would possibly retain the information on IIS?

We have however manged to get some sort of data in FNMSCompliance, BUT "LastLogin" and "LastLogout" columns are nulled  even after testing with different users to login and out again.

[mfranz]

Hi,

I think you are on the right track here. You could use the "Failed Request Tracing" feature to log who tried accessing and got rejected by the webserver. However, if you run Windows authentication, I guess most domain users should be authenticated against the webserver successfully. Only FNMS would then present a "insufficient rights" page instead of the dashboard. I am not sure if this behaviour is logged somewhere.

As there is really no logout button in FNMS on prem, trying to comply with security standards, you could at least limit the "time-out" value for the session cookie.

Best regards,

Markward

[jjensen]

Hello @sibusison,

You are correct, ComplianceOperator's 'LastLogin' and 'LastLogout' are not populated for On-Premises implementations, because FNMS relies on Windows Authentication.

You could perhaps track the date/time that requests are sent to FNMS, but clearly that would be very heavy to manage.

There is a 'LastActive' field under ComplianceOperatorAudit, I'm not sure if that would be of any use?

SELECT co.ComplianceOperatorID, co.OperatorLogin, coa.LastActive FROM ComplianceOperator co
LEFT JOIN ComplianceOperatorAudit coa ON co.ComplianceOperatorID = coa.ComplianceOperatorID
ORDER BY co.OperatorLogin ASC

My understanding is that this will be updated whenever an operator makes a change that is recorded on the History tab for any object in FNMS (anything that creates an associated record in ComplianceHistory_MT).

HTH,

Joseph