Siemens SIMATIC NET SCALANCE SC-600, Configuration Manual

Page: 360 / 372

Appendix A
A.3 Syslog messages
SCALANCE SC-600 Web Based Management (WBM)
360
Configuration Manual, 10/2021, C79000-G8976-C475-03
Facility local0
Standard IEC 62443-3-3 Reference: SR 1.1
Message text {protocol}: User {User name} has logged out from {ip address}.
Example SSH: User "Admin" has logged out from 192.168.0.1.
Explanation User session completed - logged out.
Severity Info
Facility local0
Standard IEC 62443-3-3 Reference: SR 1.1
Message text {Protocol}: Default user {User name} logged in from {Ip address}.
Example WBM: Default user <admin> logged in from 192.168.0.1.
Explanation Default user has logged in via the IP address.
Severity Info
Facility local0
Standard IEC 62443-3-3 Reference: n/a (NERC-CIP 007-R5)
Identification and authentication of devices (access via firewall)
Message text {firewall action accept}(1) in:{network interface} out:{network interface}
len:{length} s-mac:{src mac} d-mac:{dest mac}
s-ip:{ip address} d-ip:{ip address}
{protocol}:{src port}->{dest port}
Example ACCEPT(1) in:vlan1 out:ppp0 len:52
s-mac:58:EF:68:B3:FA:CE d-mac:00:1B:1B:A7:5B:D8
s-ip:172.23.1.6 d-ip:158.85.11.68 tcp:53788->443
Explanation A known device requested a connection.
Severity Info or Warning or Error (configurable)
Facility local0
Standard IEC 62443-3-3 Reference: SR 1.2
Message text {firewall action reject}(1) in:{network interface} out:{network interface}
len:{length} s-mac:{src mac} d-mac:{dest mac}
s-ip:{ip address} d-ip:{ip address}
{protocol}:{src port}->{dest port}
Example REJECT(1) in:vlan1 out:ppp0 len:52
s-mac:58:EF:68:B3:FA:CE d-mac:00:1B:1B:A7:5B:D8 s-ip:172.23.1.6 d-
ip:217.194.40.109
tcp:53773->443
Explanation An unknown device requested a connection. The request was denied.
Severity Info or Warning or Error (configurable)
Facility local0
Standard IEC 62443-3-3 Reference: SR 1.2