21.05.2021
07:00
We are going for NIST 800-171 / CMMC compliance and we will have contracts with CUI data potentially stored in WebCon flows via attachments.
Because of this we need to be able to trace every single action a user takes and log it. Uploading attachments, accessing, deleting, updating, etc....
Is this possible with WebCon? Does it have the ability to send access logs to a SIEM?
21.05.2021
21:19
Hi Bo,
I have to admit, I don't know the abbreviation you used.
The modification of any field/attachment is stored in the database and accessable via UI or history tables just fine.
You could create a workflow which runs periodically to send these information to an others system via REST/SOAP or a custom SDK action.
The one thing missing would be the views/downloads. Maybe you could check the IIS logs whether the user name is listed there. If you are using windows authentication you may be lucky. Otherwise you would need to intercept the request on the server.
You can also vote for this user voice:
https://community.webcon.com/forum/thread/271?messageid=271
Best regards,
Daniel
