Siemens SIMATIC NET SCALANCE SC-600 - Page 360

Appendix A
A.3 Syslog messages
SCALANCE SC-600 Web Based Management (WBM)
360 Configuration Manual, 10/2021, C79000-G8976-C475-03
Facility
local0
Standard
IEC 62443-3-3 Reference: SR 1.1
Message text
{protocol}: User {User name} has logged out from {ip address}.
Example
SSH: User "Admin" has logged out from 192.168.0.1.
Explanation
User session completed - logged out.
Severity
Info
Facility
local0
Standard
IEC 62443-3-3 Reference: SR 1.1
Message text
{Protocol}: Default user {User name} logged in from {Ip address}.
Example
WBM: Default user <admin> logged in from 192.168.0.1.
Explanation
Default user has logged in via the IP address.
Severity
Info
Facility
local0
Standard
IEC 62443-3-3 Reference: n/a (NERC-CIP 007-R5)
Identification and authentication of devices (access via firewall)
Message text
{firewall action accept}(1) in:{network interface} out:{network interface}
len:{length} s-mac:{src mac} d-mac:{dest mac}
s-ip:{ip address} d-ip:{ip address}
{protocol}:{src port}->{dest port}
Example
ACCEPT(1) in:vlan1 out:ppp0 len:52
s-mac:58:EF:68:B3:FA:CE d-mac:00:1B:1B:A7:5B:D8
s-ip:172.23.1.6 d-ip:158.85.11.68 tcp:53788->443
Explanation
A known device requested a connection.
Severity
Info or Warning or Error (configurable)
Facility
local0
Standard
IEC 62443-3-3 Reference: SR 1.2
Message text
{firewall action reject}(1) in:{network interface} out:{network interface}
len:{length} s-mac:{src mac} d-mac:{dest mac}
s-ip:{ip address} d-ip:{ip address}
{protocol}:{src port}->{dest port}
Example
REJECT(1) in:vlan1 out:ppp0 len:52
s-mac:58:EF:68:B3:FA:CE d-mac:00:1B:1B:A7:5B:D8 s-ip:172.23.1.6 d-
ip:217.194.40.109
tcp:53773->443
Explanation
An unknown device requested a connection. The request was denied.
Severity
Info or Warning or Error (configurable)
Facility
local0
Standard
IEC 62443-3-3 Reference: SR 1.2