Name Values (Range) Unit Step Default Description
ExtLogSrv5IP 0 - 18 IP
Address
1 127.0.0.1 External log server 5 IP-address
ExtLogSrv6Type Off
SYSLOG UDP/IP
SYSLOG TCP/IP
CEF TCP/IP
-
- Off External log server 6 type
ExtLogSrv6Port 1 - 65535 - 1 514 External log server 6 port number
ExtLogSrv6IP 0 - 18 IP
Address
1 127.0.0.1 External log server 6 IP-address
5.2 Generic security application AGSAL
GUID-D0CE0102-C651-4914-8FBF-854151D7E360 v1
As a logical node AGSAL is used for monitoring security violation regarding
authorization, access control and inactive association including authorization
failure. Therefore, all the information in AGSAL can be configured to report to
61850 client.
5.3 Security alarm SECALARM
GUID-205B0024-DA06-4369-8707-5E1D2D035995 v1
The function creates and distributes security events for mapping the security events
on protocols such as DNP3.
It is possible to map respective protocol to the signals of interest and configure
them for monitoring with the Communication Management tool (CMT) in
PCM600. No events are mapped by default.
Parameter names:
• EVENTID: Event ID of the generated security event
• SEQNUMBER: Sequence number of the generated security event
SECALARM
EVENTID
SEQNUMBER
IEC13000006-1-en.vsd
IEC13000006 V1 EN-US
Figure 21: Function block, Security alarm SECALARM
PID-3430-SETTINGS v1
Table 7: SECALARM Non group settings (basic)
Name
Values (Range) Unit Step Default Description
Operation Off
On
- - On Operation On/Off
Section 5 1MRK 511 454-UEN A
User activity logging
32 GMS600 1.3
Cyber security deployment guideline