Siemens SIMATIC NET SCALANCE SC-600 Configuration Manual page 360

Appendix A
A.3 Syslog messages
Facility
Standard
Message text
Example
Explanation
Severity
Facility
Standard
Message text
Example
Explanation
Severity
Facility
Standard
Identification and authentication of devices (access via firewall)
Message text
Example
Explanation
Severity
Facility
Standard
Message text
Example
Explanation
Severity
Facility
Standard
360
local0
IEC 62443-3-3 Reference: SR 1.1
{protocol}: User {User name} has logged out from {ip address}.
SSH: User "Admin" has logged out from 192.168.0.1.
User session completed - logged out.
Info
local0
IEC 62443-3-3 Reference: SR 1.1
{Protocol}: Default user {User name} logged in from {Ip address}.
WBM: Default user <admin> logged in from 192.168.0.1.
Default user has logged in via the IP address.
Info
local0
IEC 62443-3-3 Reference: n/a (NERC-CIP 007-R5)
{firewall action accept}(1) in:{network interface} out:{network interface}
len:{length} s-mac:{src mac} d-mac:{dest mac}
s-ip:{ip address} d-ip:{ip address}
{protocol}:{src port}->{dest port}
ACCEPT(1) in:vlan1 out:ppp0 len:52
s-mac:58:EF:68:B3:FA:CE d-mac:00:1B:1B:A7:5B:D8
s-ip:172.23.1.6 d-ip:158.85.11.68 tcp:53788->443
A known device requested a connection.
Info or Warning or Error (configurable)
local0
IEC 62443-3-3 Reference: SR 1.2
{firewall action reject}(1) in:{network interface} out:{network interface}
len:{length} s-mac:{src mac} d-mac:{dest mac}
s-ip:{ip address} d-ip:{ip address}
{protocol}:{src port}->{dest port}
REJECT(1) in:vlan1 out:ppp0 len:52
s-mac:58:EF:68:B3:FA:CE d-mac:00:1B:1B:A7:5B:D8 s-ip:172.23.1.6 d-
ip:217.194.40.109
tcp:53773->443
An unknown device requested a connection. The request was denied.
Info or Warning or Error (configurable)
local0
IEC 62443-3-3 Reference: SR 1.2
SCALANCE SC-600 Web Based Management (WBM)
Configuration Manual, 10/2021, C79000-G8976-C475-03