Brocade Network Advisor SAN User Manual v12.3.0 - Manual (Page 1497)

Brocade Network Advisor SAN User Manual 1445
53-1003154-01
Security events
C
Security events
Security events are those that indicate authentication success or failure, a security violation, or
user login and logout.
Security events for FC devices
For FOS switches, if the event is a RASLOG event and the RASLOG ID contains 'SEC', then the event
is categorized as a security event.
Security events for IP devices
For IOS devices, if the event OID starts with any of the following OIDs, then the event is categorized
as a security event.
• 1.3.6.1.2.1.14.16.2.6 [ospfIfAuthFailure]
• 1.3.6.1.2.1.14.16.2.7 [ospfVirtIfAuthFailure]
• 1.3.6.1.4.1.1991.0.9 [snOspfIfAuthFailure]
• 1.3.6.1.4.1.1991.0.10 [snOspfVirtIfAuthFailure]
• 1.3.6.1.4.1.1991.0.75 [snTrapUserLogin]
• 1.3.6.1.4.1.1991.0.76 [snTrapUserLogout]
• 1.3.6.1.4.1.1991.0.77 [snTrapPortSecurityViolation]
• 1.3.6.1.4.1.1991.0.78 [snTrapPortSecurityShutdown]
• 1.3.6.1.4.1.1991.0.85 [snTrapMacAuthEnable]
• 1.3.6.1.4.1.1991.0.86 [snTrapMacAuthDisable]
• 1.3.6.1.4.1.1991.0.87 [snTrapMacAuthMACAccepted]
• 1.3.6.1.4.1.1991.0.88 [snTrapMacAuthMACRejected]
• 1.3.6.1.4.1.1991.0.89 [snTrapMacAuthPortDisabled]
• 1.3.6.1.4.1.1991.0.110 [snTrapClientLoginReject]
• 1.3.6.1.4.1.1991.0.131 [snTrapDot1xSecurityViolation]
• 1.3.6.1.4.1.1991.0.143 [snTrapMacAuthRadiusTimeout]
• 1.3.6.1.4.1.1991.0.144 [snTrapDot1xRadiusTimeout]
• 1.3.6.1.4.1.1991.1.5.1.1.2.1.0.36 [swPortSecurityTrap]
• 1.3.6.1.4.1.1991.1.6.1.1.5.2.3 [sysRadiusServerChanged]
• 1.3.6.1.4.1.1991.1.6.1.1.6.2.3 [sysRadiusServerChanged]
• 1.3.6.1.4.1.1991.1.6.1.7.4.2.3 [dot11StationAuthentication]
• 1.3.6.1.4.1.1991.1.6.1.7.4.2.7 [dot1xMacAddrAuthSuccess]
• 1.3.6.1.4.1.1991.1.6.1.7.4.2.8 [dot1xMacAddrAuthFail]
• 1.3.6.1.4.1.1991.1.6.1.7.4.2.9 [dot1xAuthNotInitiated]
• 1.3.6.1.4.1.1991.1.6.1.7.4.2.10 [dot1xAuthSuccess]
• 1.3.6.1.4.1.1991.1.6.1.7.4.2.11 [dot1xAuthFail]
• 1.3.6.1.4.1.1991.1.6.1.7.4.2.12 [localMacAddrAuthSuccess]