Security Monitoring Guidelines And Default Settings; Security Class Areas; Table 5 Security Class Areas - Brocade Communications Systems StoreFabric SN6500B Administrator's Manual

6

Security monitoring guidelines and default settings

Security monitoring guidelines and default settings

The Security class monitors all attempts to breach your SAN security, helping you fine-tune your
security measures.

Security class areas

Table 5
Although it is recommended that you leave the entire Security class in its default state (no alerts),
you can configure the Security class using the thConfig command.
TABLE 5
Area
DCC violations (DV)
HTTP violations (HV)
Illegal command (IV)
Incompatible security
DB (ISB)
Login violations (LV)
Invalid Certifications (IC)
No-FCS (NF)
SCC violations (SV)
SLAP failures (FSLAP)
Telnet violations (TV)
TS out of sync (TS)
40
lists Product Name areas in the Security class and describes what each area indicates.
Security class areas
Description
An unauthorized device attempts to log in to a secure fabric.
A browser access request reaches a secure switch from an unauthorized IP address.
Commands permitted only to the primary Fibre Channel Switch (FCS) are executed on
another switch.
Secure switches with different version stamps have been detected.
Login violations which occur when a secure fabric detects a login failure.
The switch has lost contact with the primary FCS.
SCC violations which occur when an unauthorized switch tries to join a secure fabric.
The WWN of the unauthorized switch appears in the ERRLOG.
SLAP failures which occur when packets try to pass from a nonsecure switch to a
secure fabric.
Telnet violations which occur when a Telnet connection request reaches a secure
switch from an unauthorized IP address.
Time Server (TS) which occur when an out-of-synchronization error has been detected.
Fabric Watch Administrator's Guide
53-1002752-01