Cisco TelePresence SX20 Codec Reference Manual page 53

Cisco TelePresence SX20 Codec
Contents Introduction
Security configuration
xConfiguration Security Audit Logging Mode
Determine where to record or transmit the audit logs. When using the External or ExternalSecure
modes, you also must enter the address and port number for the audit server in the Security Audit
Server Address and Security Audit Server Port settings.
NOTE: Restart the system for any change to this setting to take effect.
Requires user role: AUDIT
Value space: <Off/Internal/External/ExternalSecure>
Off: No audit logging is performed.
Internal: The system records the audit logs to internal logs, and rotates logs when they are full.
External: The system sends the audit logs to an external audit server (syslog server). The audit
server must support TCP.
ExternalSecure: The system sends encrypted audit logs to an external audit server (syslog server)
that is verified by a certificate in the Audit CA list. The Audit CA list file must be uploaded to the
codec using the web interface. The common_name parameter of a certificate in the CA list must
match the IP address of the audit server.
Example: xConfiguration Security Audit Logging Mode: Off
xConfiguration Security Audit Server Address
Enter the IP address of the audit server. Only valid IPv4 or IPv6 address formats are accepted. Host
names are not supported. This setting is only relevant when Security Audit Logging Mode is set to
External or ExternalSecure.
NOTE: Restart the system for any change to this setting to take effect.
Requires user role: AUDIT
Value space: <S: 0, 64>
Format: A valid IPv4 address or IPv6 address.
Example: xConfiguration Security Audit Server Address: ""
xConfiguration Security Audit Server Port
Enter the port of the audit server that the system shall send its audit logs to. The default port is 514.
This setting is only relevant when Security Audit Logging Mode is set to External or ExternalSecure.
NOTE: Restart the system for any change to this setting to take effect.
Requires user role: AUDIT
Value space: <0..65535>
Range: Select a value from 0 to 65535.
Example: xConfiguration Security Audit Server Port: 514
SX20 Codec API Reference Guide TC6.2, JULY 2013.
D14949.04
About the API xConfiguration xConfiguration
xConfiguration Security Audit OnError Action
xConfiguration Security Session ShowLastLogon
xConfiguration Security Session InactivityTimeout
53
xCommand
Determine what happens when the connection to the audit server is lost. This setting is only
relevant when Security Audit Logging Mode is set to ExternalSecure.
NOTE: Restart the system for any change to this setting to take effect.
Requires user role: AUDIT
Value space: <Halt/Ignore>
Halt: If a halt condition is detected the system is rebooted and only the auditor is allowed to
operate the unit until the halt condition has passed. When the halt condition has passed the audit
logs are re-spooled to the audit server. Halt conditions are: A network breach (no physical link), no
audit server running (or wrong audit server address or port), TLS authentication failed (if in use),
local backup (re-spooling) log full.
Ignore: The system will continue its normal operation, and rotate internal logs when full. When the
connection is restored it will again send its audit logs to the audit server.
Example: xConfiguration Security Audit OnError Action: Ignore
When logging in to the system using SSH or Telnet you will see the UserId, time and date of the last
session that did a successful login.
Requires user role: ADMIN
Value space: <Off/On>
On: Show information about the last session.
Off: Do not show information about the last session.
Example: xConfiguration Security Session ShowLastLogon: Off
Determine how long the system will accept inactivity from the user before he is automatically logged
out.
Requires user role: ADMIN
Value space: <0..10000>
Range: Select a value between 1 and 10000 seconds; or select 0 when inactivity should not
enforce automatic logout.
Example: xConfiguration Security Session InactivityTimeout: 0
API Reference Guide
xStatus Appendices
Copyright © 2013 Cisco Systems, Inc. All rights reserved.