Generic Security Application Agsal; Security Alarm Secalarm - ABB GMS600 Manual

Section 5
User activity logging
Name
ExtLogSrv5IP
ExtLogSrv6Type
ExtLogSrv6Port
ExtLogSrv6IP
5.2
5.3
Table 7: SECALARM Non group settings (basic)
Name
Operation
32
Values (Range) Unit
0 - 18 IP
Address
Off -
SYSLOG UDP/IP
SYSLOG TCP/IP
CEF TCP/IP
1 - 65535 -
0 - 18 IP
Address

Generic security application AGSAL

As a logical node AGSAL is used for monitoring security violation regarding
authorization, access control and inactive association including authorization
failure. Therefore, all the information in AGSAL can be configured to report to
61850 client.

Security alarm SECALARM

The function creates and distributes security events for mapping the security events
on protocols such as DNP3.
It is possible to map respective protocol to the signals of interest and configure
them for monitoring with the Communication Management tool (CMT) in
PCM600. No events are mapped by default.
Parameter names:
• EVENTID: Event ID of the generated security event
• SEQNUMBER: Sequence number of the generated security event
SECALARM
EVENTID
SEQNUMBER
IEC13000006-1-en.vsd
IEC13000006 V1 EN-US
Figure 21: Function block, Security alarm SECALARM
Values (Range) Unit
Off -
On
Step Default
1 127.0.0.1
- Off
1 514
1 127.0.0.1
Step Default
- On
1MRK 511 454-UEN A
Description
External log server 5 IP-address
External log server 6 type
External log server 6 port number
External log server 6 IP-address
GUID-D0CE0102-C651-4914-8FBF-854151D7E360 v1
GUID-205B0024-DA06-4369-8707-5E1D2D035995 v1
Description
Operation On/Off
Cyber security deployment guideline
PID-3430-SETTINGS v1
GMS600 1.3