Fidelis Common Criteria Configuration Manual page 20

SFR Event
FTP_ITC.1 Initiation of the
trusted channel.
Termination of the
trusted channel.
Failure of the trusted
channel functions.
FTP_TRP.1/ Initiation of the
Admin trusted channel.
Termination of the
trusted channel.
Failure of the trusted
channel functions.
Component Processes and Descriptions
The table below lists all Fidelis Network processes that handle network traffic.
Table 3. Traffic Handling Processes and Descriptions
Component
All
All
Fidelis Network Common Criteria Configuration Guide Version 9.0.3
Additional
Information
Identification
of the initiator
None
Target of
failed trusted
channels
establishment
attempt
Identification
of the claimed
user identity.
Identification
of the claimed
user identity.
Identification
of the claimed
user identity.
Process Name Privilege
sshd Runs as root
rconfigd Runs as root
Sample Log
192.168.42.5
Mar 17 09:50:25 10.42.209.241 syslog-
ng[26996] : Syslog connection
established; fd='10',
server='AF_INET(10.42.213.205:6514)' ,
local=' AF_INET(0.0.0.0:0)'
Mar 17 10:17:37 10.42.209.241 syslog-
ng[28959] syslog-ng shutting down;
version='3.7.3'
Mar 17 09:50:15 10.42.209.241 syslog-
ng[26996] : Syslog connection failed;
fd='10',
server='AF_INET(10.42.213.205:6514)' ,
error='Connection refused (111)',
time_reopen='10'
Mar 17 09:52:00 10.42.209.241 FSS:
audit: admin logged on from
10.42.29.155
Mar 17 10:00:07 10.42.209.241 FSS:
audit: admin logged out from
10.42.209.241
Mar 17 10:01:51 10.42.209.241 FSS:
audit: admin failed attempt to login from
10.42.209.155 (calling: login)
Description
Secure shell daemon for remote
access
Serves as the Remote
Configuration Daemon that is
required for communication
between components
17 www.fidelissecurity.com