Security Monitoring Guidelines And Default Settings; Security Class Areas; Security Monitoring Setting Guidelines; Table 5 Security Class Areas - Brocade Communications Systems 8 Administrator's Manual

6

Security monitoring guidelines and default settings

Security monitoring guidelines and default settings

The Security class monitors all attempts to breach your SAN security, helping you fine-tune your
security measures.

Security class areas

Table 5
Configure the Security class using the thConfig command.
TABLE 5
Area
DCC violations
HTTP violations
Illegal command
Incompatible security
DB
Invalid certificates
Login violations
No-FCS
SCC violations
SLAP failures (FCAP
failures)
Telnet violations
TS Out of Sync

Security monitoring setting guidelines

Use the Security class default settings for area and notification configuration. There is no reason to
alter the default settings.
44
lists Product Name areas in the security class and describes what each area indicates.
Security class areas
Indicates
An unauthorized device attempts to log in to a secure fabric.
A browser access request reaches a secure switch from an unauthorized IP address.
Commands permitted only to the primary Fibre Channel Switch (FCS) are executed on
another switch.
Secure switches with different version stamps have been detected.
Monitors invalid certificates.
Login violations which occur when a secure fabric detects a login failure.
The switch has lost contact with the primary FCS.
SCC violations which occur when an unauthorized switch tries to join a secure fabric.
The WWN of the unauthorized switch appears in the ERRLOG.
SLAP failures which occur when packets try to pass from a nonsecure switch to a
secure fabric.
Telnet violations which occur when a Telnet connection request reaches a secure
switch from an unauthorized IP address.
Time Server (TS) which occur when an out-of-synchronization error has been detected.
Fabric Watch Administrator's Guide
53-1001770-01