SeverityNoticeFacility local0标准 IEC 62443-3-3 参考:SR 1.4消息文本 {Protocol}:User {User name} created role {Role}.示例 WBM / UDP / TCP / Telnet /SSH / Console / PNIO / PB / OPC: User <Username> created role<Role>.说明 已创建角色。Severity NoticeFacility local0标准 IEC62443-3-3 参考:SR 4.7消息文本 {Protocol}: User {User name} deleted role{Role}.示例 WBM / UDP / TCP / Telnet / SSH / Console / PNIO / PB /OPC: User <Username> deleted role <Role>.说明已删除角色。Severity NoticeFacility local0标准 IEC 62443-3-3 参考:SR 4.8消息文本{Protocol}: User {User name} changed role {Role}.示例 WBM / UDP / TCP/ Telnet / SSH / Console / PNIO / PB / OPC: User <Username>changed role <Role>.说明 已更改角色。Severity NoticeFacility local0标准IEC 62443-3-3 参考:SR 4.9登录尝试失败消息文本 {User name} account is locked for{Time minute} minutes after {Failedlogin count} unsuccessful loginattempts.示例 User service account is locked for 44 minutes after 10unsuccessfullogin attempts.说明 如果登录失败次数过多,则相应的用户帐户将被锁定一段特定的时间。附录ASCALANCE XB-200/XC-200/XF-200BA/XP-200/XR-300WG Web BasedManagement V4.3.1438 配置手册, 11/2021, C79000-G8952-C360-13SeverityWarningFacility local0标准 IEC 62443-3-3 参考:SR 1.11{Protocol}: {IPaddress} is temporarily blocked for {Time second} seconds after{Failed logincount} unsuccessful login attempts.示例 All:192.168.1.105 is temporarily blocked for 600 seconds after11unsuccessful login attempts.说明 登录尝试失败次数过多后,BFA 预防将 IP地址锁定了一段时间。在此示例中,在登录尝试失败 11 次后,BFA 预防将 IP 地址“192.168.1.105”锁定了 600秒。Severity WarningFacility local0标准 IEC 62443-3-3 参考:SR1.11会话锁定消息文本 The session of user {user name} was closed after{time} seconds ofinactivity.示例 The session of user admin was closedafter 60 seconds of inactivity.说明 当前会话因非活动状态而被锁定。SeverityWarningFacility local0标准 IEC 62443-3-3 参考:SR 2.5关闭远程访问会话消息文本{Protocol}: Remote session \Config detail} was closed after{Timesecond} seconds of inactivity.示例 WBM / UDP / TCP / Telnet /SSH / Console / PNIO / PB / OPC: Remote sessionOpenVPN was closedafter 44 seconds of inactivity.说明 一段时间无活动后,远程会话终止。SeverityNoticeFacility local0标准 IEC 62443-3-3 Reference: SR 2.6附录 ASCALANCEXB-200/XC-200/XF-200BA/XP-200/XR-300WG Web Based ManagementV4.3.1配置手册, 11/2021, C79000-G8952-C360-13 439通过不受信任的网络访问消息文本{Protocol}: Remote access enabled via {Trigger condition}.示例 WBM /UDP / TCP / Telnet / SSH / Console / PNIO / PB / OPC: Remoteaccessenabled via E/A-Pin.说明 允许远程访问。Severity InfoFacility local0标准IEC 62443-3-3 参考:SR 1.13消息文本 {Protocol}: Remote access disabled via{Trigger condition}.示例 WBM / UDP / TCP / Telnet / SSH / Console /PNIO / PB / OPC: Remote accessdisabled via E/A-Pin.说明远程访问被拒绝。Severity InfoFacility local0标准 IEC 62443-3-3 参考:SR 1.13消息文本{Protocol}: User {User name} logged in from {IP address}.示例 WBM /UDP / TCP / Telnet / SSH / Console / PNIO / PB / OPC: Useradminlogged in from 192.168.1.105.说明 用户已成功登录远程设备。SeverityInfoFacility local0标准 IEC 62443-3-3 参考:SR 1.13消息文本 {Protocol}: User{User name} failed to login from {IP address}.示例 WBM / UDP / TCP /Telnet / SSH / Console / PNIO / PB / OPC: User adminfailed to loginfrom 192.168.1.105.说明 用户无法登录远程设备。Severity ErrorFacility local0标准IEC 62443-3-3 参考:SR 1.13附录 ASCALANCEXB-200/XC-200/XF-200BA/XP-200/XR-300WG Web Based ManagementV4.3.1440 配置手册, 11/2021, C79000-G8952-C360-13消息文本 {Protocol}: User{User name} has logged out.示例 WBM / UDP / TCP / Telnet / SSH /Console / PNIO / PB / OPC: User admin haslogged out.说明用户已注销。Severity InfoFacility local0标准 IEC 62443-3-3 参考:SR 1.13消息文本{Protocol}: Connection from {IP address} established.示例 WBM / UDP /TCP / Telnet / SSH / Console / PNIO / PB / OPC: Connectionfrom192.168.1.105 established.说明 已建立 VPN 连接。Severity InfoFacilitylocal0标准 IEC 62443-3-3 参考:n/a (NERC-CIP 005-R1)消息文本 {Protocol}:Connection from {IP address} closed.示例 WBM / UDP / TCP / Telnet /SSH / Console / PNIO / PB / OPC: Connectionfrom 192.168.1.105closed.说明 已关闭 VPN 连接。Severity InfoFacility local0标准 IEC 62443-3-3参考:n/a (NERC-CIP 005-R1)消息文本 {Protocol}: Connection from {IPaddress} failed. Reason: {Reason}.示例 WBM / UDP / TCP / Telnet / SSH/ Console / PNIO / PB / OPC: Connectionfrom 192.168.1.105 failed.Reason: unsuccessful authentication.说明 由于验证无效,无法建立连接。SeverityErrorFacility local0标准 IEC 62443-3-3 参考:n/a (NERC-CIP 005-R3)附录ASCALANCE XB-200/XC-200/XF-200BA/XP-200/XR-300WG Web BasedManagement V4.3.1配置手册, 11/2021, C79000-G8952-C360-13441设备标识和验证{Protocol}: Device {Src mac} access granted.示例 WBM:Device 00:0C:29:2F:09:B3 access granted.说明由于端口验证成功,设备访问得到保证。在本示例中,可保证通过源 MAC地址“00:0C:29:2F:09:B3”访问设备。Severity InfoFacility local0标准 IEC62443-3-3 参考:SR 1.2消息文本 {Protocol}: {IP address} access granted.示例WBM / UDP / TCP / Telnet / SSH / Console / PNIO / PB / OPC:192.168.1.105access granted.说明 满足防火墙规则或 ACL 时授予访问权限。SeverityInfoFacility local0标准 IEC 62443-3-3 参考:SR 1.2消息文本 {Protocol}: {IPaddress} access granted.示例 WBM / UDP / TCP / Telnet / SSH / Console/ PNIO / PB / OPC: 192.168.1.105access granted.说明保证通过云连接器进行访问。Severity InfoFacility local0标准 IEC 62443-3-3 参考:SR1.2{Protocol}: Device {Src mac} access denied.示例 WBM: Device00:0C:29:2F:09:B3 access denied.说明 由于端口验证失败,设备访问被拒绝。在本示例中,通过源 MAC地址“00:0C:29:2F:09:B3”访问设备被拒绝。Severity ErrorFacility local0标准 IEC62443-3-3 参考:SR 1.2附录 ASCALANCEXB-200/XC-200/XF-200BA/XP-200/XR-300WG Web Based ManagementV4.3.1442 配置手册, 11/2021, C79000-G8952-C360-13消息文本 {Protocol}: {IPaddress} access blocked.示例 WBM / UDP / TCP / Telnet / SSH / Console/ PNIO / PB / OPC: 192.168.1.105access blocked.说明由于不满足防火墙规则或访问控制列表,访问被拒绝。由于不满足防火墙规则或 ACL,访问被拒绝。SeverityErrorFacility local0标准 IEC 62443-3-3 参考:SR 1.2消息文本 {Protocol}: {IPaddress} access blocked.示例 WBM / UDP / TCP / Telnet / SSH / Console/ PNIO / PB / OPC: 192.168.1.105access blocked.说明通过云连接器进行访问被拒绝。Severity ErrorFacility local0标准 IEC 62443-3-3 参考:SR1.2{Protocol}: Connection from device {IP address} subject{Subject} successfully established.示例 WBM: Connection from device192.168.1.105 subject (Peter Maier)successfully established.说明设备验证成功。在本示例中,IP 地址为“192.168.1.105”的设备与 SINEC OS 设备成功建立了连接。SeverityInfoFacility local0标准 IEC 62443-3-3 参考:SR 1.2{Protocol}: Connectionfrom device {IP address} subject {Subject} failed.示例 WBM:Connection from device 192.168.1.105 subject (Peter Maier)failed.说明设备验证失败。在本示例中,IP 地址为“192.168.1.105”的设备无法与 SINEC OS 设备建立连接。