Appendix A
A.3 Syslog messages
SCALANCE SC-600 Web Based Management (WBM)
362
Configuration Manual, 10/2021, C79000-G8976-C475-03
Facility
local0
Standard
IEC 62443-3-3 Reference: SR 1.4
Unsuccessful logon attempts
Message text
{User name} account is locked for {Time minute} minutes after {Failed login
count} unsuccessful login attempts.
Example
User service account is locked for 44 minutes after 10 unsuccessful login
attempts.
Explanation
If there are too many failed logins, the corresponding user account was
locked for a specific period of time.
Severity
Warning
Facility
local0
Standard
IEC 62443-3-3 Reference: SR 1.11
Access via untrusted networks (IPsec)
Message text
[IKE] <{connection name}|{config detail}> IKE_SA {connection
name}[{config detail}] established between {ip address}[{config detail}]...{ip
address}[{config detail}]
Example
[IKE] <c1|3> IKE_SA c1[1] established between 192.168.55.210[lokal]..
192.168.55.211[remote]
Explanation
VPN connection is established (IPsec).
Severity
Info
Facility
local0
Standard
IEC 62443-3-3 Reference: n/a (NERC CIP 005-R1)
Message text
[IKE] <{connection name}|{config detail}> deleting IKE_SA {connection
name}[{config detail}] between {ip address}[{config detail}]...{ip
address}[{config detail}]
Example
[IKE] <c1|3> deleting IKE_SA c2[1] between
192.168.55.211[lokal].. 192.168.55.210[remote]
Explanation
VPN tunnel is closed (IPsec).
Severity
Info
Facility
local0
Standard
IEC 62443-3-3 Reference: n/a (NERC CIP 005-R1)
Message text
[IKE] <{connection name}|{config detail}> received
AUTHENTICATION_FAILED notify error
Example
[IKE] <c1|1> received AUTHENTICATION_FAILED notify error
Explanation
Authentication of VPN connection failed (IPsec).
Severity
Error
Facility
local0
Standard
IEC 62443-3-3 Reference: n/a (NERC CIP 005-R3)
Summary of Contents for SIMATIC NET SCALANCE SC-600
Page 68: ......