Appendix A
A.3 Syslog messages
SCALANCE SC-600 Web Based Management (WBM)
362 Configuration Manual, 10/2021, C79000-G8976-C475-03
IEC 62443-3-3 Reference: SR 1.4
Unsuccessful logon attempts
{User name} account is locked for {Time minute} minutes after {Failed login
count} unsuccessful login attempts.
User service account is locked for 44 minutes after 10 unsuccessful login
attempts.
If there are too many failed logins, the corresponding user account was
locked for a specific period of time.
IEC 62443-3-3 Reference: SR 1.11
Access via untrusted networks (IPsec)
[IKE] <{connection name}|{config detail}> IKE_SA {connection
name}[{config detail}] established between {ip address}[{config detail}]...{ip
address}[{config detail}]
[IKE] <c1|3> IKE_SA c1[1] established between 192.168.55.210[lokal]..
192.168.55.211[remote]
VPN connection is established (IPsec).
IEC 62443-3-3 Reference: n/a (NERC CIP 005-R1)
[IKE] <{connection name}|{config detail}> deleting IKE_SA {connection
name}[{config detail}] between {ip address}[{config detail}]...{ip
address}[{config detail}]
[IKE] <c1|3> deleting IKE_SA c2[1] between
192.168.55.211[lokal].. 192.168.55.210[remote]
VPN tunnel is closed (IPsec).
IEC 62443-3-3 Reference: n/a (NERC CIP 005-R1)
[IKE] <{connection name}|{config detail}> received
AUTHENTICATION_FAILED notify error
[IKE] <c1|1> received AUTHENTICATION_FAILED notify error
Authentication of VPN connection failed (IPsec).
IEC 62443-3-3 Reference: n/a (NERC CIP 005-R3)