Siemens SIMATIC PCS 7 - Page 137

Special functions of the CPU 410
9.3 Security event logging
CPU 410 Process Automation/CPU 410 SMART
System Manual, 05/2017, A5E31622160-AC
137
CEF parameter
Key name
Meaning
Connection parameters
(optional)
The following parameters are summarized under the term "Connection
parameters":
• Connection_id, Session ID
• Protocol
• Application protocol
• Connection type
• Gateway session ID
• Source addresses
– Source IP address
– Source MAC address
– SourcePort
– Source tsap id
– Source subnet id
– Source Profibus address
– Source C-bus rack number
– Source C-bus slot number
• Destination addresses
– Destination IP address
– Destination MAC address
– Destination port
– Destination tsap id
– Destination subnet id
– Destination Profibus address
– Destination K bus rack number
– Destination C-bus slot number
Status (optional)
status
Contains the number of overwritten unsent security events
Note
You can request the details of specific encodings from Customer Support.
Events
The following table provides an overview of the individual events.
Security
event ID
Event
Security Event Severity meaning
3
SE_NETWORK_SUCCESSFUL_LOGON
Connection established with correct authentication
4 SE_NETWORK_UNSUCCESSFUL_LOGON Error occurred during logon.
Incorrect password or logon not currently possible (due to
AaA)