Industrial Ethernet Security with CP 1543-1
13.2 Logging
Communication
244 Function Manual, 12/2017, A5E03735815-AF
For test and monitoring purposes, the security module has diagnostics and logging functions.
● Diagnostics functions
These include various system and status functions that you can use in online mode.
● Logging functions
This involves the recording of system and security events. Depending on the event type,
the recording is made in volatile or non-volatile local buffer areas of the CP 1543-1. As an
alternative, it is also possible to record on a network server.
The parameter assignment and evaluation of these functions is only possible with a
network connection.
Recording events with logging functions
You specify which events should be recorded with the log settings. Here you can configure
the following recording variants:
● Local logging
With this variant, you record the events in local buffers of the CP 1543-1. In the online
dialog of the Security Configuration Tool, you can then access these recordings, visualize
them and archive them on the service station.
● Network Syslog
With the network Syslog, you use a Syslog server in the network. This records the events
according to the configuration in the log settings.
To check the time validity of a certificate and the time stamp of log entries, the date and time
are maintained on the CP 1543-1 as on the CPU. This time can be synchronized with NTP.
The CP 1543-1 forwards the synchronized time to the CPU via the backplane bus of the
automation system. This way the CPU also receives a synchronized time for the time events
in program execution.
The automatic setting and periodic synchronization of the time takes place either via a
secure or non-secure NTP server. You can assign a maximum of 4 NTP servers to the
CP 1543-1. A mixed configuration of non-secure and secure NTP servers is not possible.
To Next Page
Loading...
