Hirschmann GREYHOUND GRS1020, Reference Manual

Page: 533 / 619

Operation diagnosis
13.3 Security Status
193
UM Config GRS
Release 8.0 09/2019
13.3 Security Status
The Security Status provides an overview of the overall security of the device. Many processes aid
in system visualization by recording the security status of the device and then presenting its
condition in graphic form. The device displays the overall security status in the Basic Settings >
System dialog, Security status frame.
In the Global tab of the Diagnostics > Status Configuration > Security Status dialog the device displays
its current status as error or ok in the Security status frame. The device determines this status from
the individual monitoring results.
The device enables you to:

Out-of-Band signalling using a signal contact

signal the changed security status by sending an SNMP trap

detect the security status in the Basic Settings > System dialog of the Graphical User Interface

query the security status in the Command Line Interface
13.3.1 Events which can be monitored

Specify the events that the device monitors.
For the corresponding parameter, mark the checkbox in the Monitor column.
Table 33: Security Status events
Name Meaning
Password default settings
unchanged
After installation change the passwords to increase security.
When active and the default passwords remain unchanged, the
device displays an alarm.
Min. password length < 8 Create passwords more than 8 characters long to maintain a
high security posture. When active, the device monitors the Min.
password length setting.
Password policy settings
deactivated
The device monitors the settings located in the Device Security >
User Management dialog for password policy requirements.
User account password policy
check deactivated
The device monitors the settings of the Policy check checkbox.
When Policy check is inactive, the device sends an SNMP trap.
Telnet server active The device monitors when you enable the Telnet function.
HTTP server active The device monitors when you enable the HTTP function.
SNMP unencrypted The device monitors when you enable the SNMPv1 or SNMPv2
function.
Access to system monitor with serial
interface possible
The device monitors the System Monitor status.
Saving the configuration profile on
the external memory possible
The device monitors the possibility to save configurations to the
external non-volatile memory.
Link interrupted on enabled device
ports
The device monitors the link status of active ports.
Access with HiDiscovery possible The device monitors when you enable the HiDiscovery read/
write access function.
Load unencrypted config from
external memory
The device monitors the security settings for loading the
configuration from the external NVM.