Special functions of the CPU 410
9.4 Field Interface Security
CPU 410 Process Automation/CPU 410 SMART
138
System Manual, 05/2017, A5E31622160-AC
Security
event ID
Event
Security Event Severity meaning
5
SE_LOGOFF
Cancel logon
11
SE_ACCESS_PWD_ENSABLED
Password protection was set up
12
SE_ACCESS_PWD_DISABLED
Password protection was revoked
13
SE_ACCESS_PWD_CHANGED
Password has been changed.
20
SE_ACCESS_DENIED
A connection setup from the outside is rejected because
Field Interface Security is activated for this interface
71
SE_SOFTWARE_INTEGRITY_CHECK_FAILE
D
An attempt was made to install invalid firmware.
75
SE_SESSION_CLOSED
Connection closed
94
SE_SECURITY_CONFIGURATION_CHANGE
D
The CPU security settings have been changed.
95
SE_SESSION_ESTABLISHED
Connection established
96
SE_CFG_DATA_CHANGED
A configuration change was made
97
SE_USER_PROGRAM_CHANGED
A PCS 7 user program change has been transferred
98
SE_OPMOD_CHANGED
Operating state changed
99
SE_FIRMWARE_LOADED
A firmware change has been downloaded.
100
SE_FIRMWARE_ACTIVATED
The previously downloaded firmware change has been acti-
vated.
101
SE_SYSTEMTIME_CHANGED
The time of day has been reset.
Note
You can request the details of specific encodings from Customer Support.
Procedure
You can configure the sending of security events in HW Config as follows:
●
Send Yes/No, common switch for all messages
●
IP address of the SIEM server. You can specify two different IP addresses.
●
The port number on the SIEM server
●
You can assign a maximum of 4 IP addresses per station and assign all 4 IP addresses
to one interface (X5, X8).