Reference (Supporting Fabric OS v7.3.0) Owner manual

818 Fabric OS Message Reference
53-1003140-01
SEC-3006
5
SEC-3006
Message Event: <Event Name>, Status: success, Info: Removed member(s) <Members removed>
from policy <Policy name>.
Message Type AUDIT
Class SECURITY
Severity INFO
Probable Cause Indicates a user has removed the specific members from the security policy. When you use a wildcard
(for example, an asterisk) in removing members from a policy, the audit report displays the wildcard in
the event information field.
Recommended
Action
Verify the security event was planned. If the security event was planned, no action is required. If the
security event was not planned, take appropriate action as defined by your enterprise security policy.
SEC-3007
Message Event: <Event Name>, Status: success, Info: Deleted policy <Deleted policy name>.
Message Type AUDIT
Class SECURITY
Severity INFO
Probable Cause Indicates the specified security policy was deleted.
Recommended
Action
Verify the security event was planned. If the security event was planned, no action is required. If the
security event was not planned, take appropriate action as defined by your enterprise security policy.
SEC-3008
Message Event: <Event Name>, Status: success, Info: FCS member moved from position <Old
FCS position> to <New FCS position>.
Message Type AUDIT
Class SECURITY
Severity INFO
Probable Cause Indicates the fabric configuration server (FCS) list has been modified. One of the members of the list has
been moved to a new position in the list.
Recommended
Action
Verify the modification was planned. If the modification was planned, no action is required. If the
modification was not planned, take appropriate action as defined by your enterprise security policy.