Cisco Cisco Web Security Appliance S390 Betriebsanweisung

Seite von 430
 
20-27
AsyncOS 8.1 for Cisco Web Security User Guide
 
Chapter 20      Monitor System Activity Through Logs
  Access Log Field Descriptions and Identifiers
BLOCK_WBRS
The Web Proxy blocked the transaction based on the Web 
Reputation filter settings for the Access Policy group.
BLOCK_WBRS_IDS
The Web Proxy blocked the upload request based on the 
Web Reputation filter settings for the Data Security Policy 
group.
BLOCK_WEBCAT
The Web Proxy blocked the transaction based on URL 
category filtering settings for the Access Policy group.
BLOCK_WEBCAT_IDS
The Web Proxy blocked the upload request based on the 
URL category filtering settings for the Data Security Policy 
group.
DECRYPT_ADMIN
The Web Proxy decrypted the transaction based on some 
default settings for the Decryption Policy group.
DECRYPT_WEBCAT
The Web Proxy decrypted the transaction based on URL 
category filtering settings for the Decryption Policy group.
DECRYPT_WBRS
The Web Proxy decrypted the transaction based on the Web 
Reputation filter settings for the Decryption Policy group.
DEFAULT_CASE
The Web Proxy allowed the client to access the server 
because none of the AsyncOS services, such as Web 
Reputation or anti-malware scanning, took any action on 
the transaction.
DROP_ADMIN
The Web Proxy dropped the transaction based on some 
default settings for the Decryption Policy group.
DROP_WEBCAT
The Web Proxy dropped the transaction based on URL 
category filtering settings for the Decryption Policy group.
DROP_WBRS
The Web Proxy dropped the transaction based on the Web 
Reputation filter settings for the Decryption Policy group.
MONITOR_AMP_RESP
The Web Proxy monitored the server response based on the 
Advanced Malware Protection settings for the Access 
Policy group.
MONITOR_AMW_RESP
The Web Proxy monitored the server response based on the 
Anti-Malware settings for the Access Policy group.
MONITOR_AMW_RESP_URL
The Web Proxy suspects the URL in the HTTP request 
might not be safe, but it monitored the transaction based on 
the Anti-Malware settings for the Access Policy group.
MONITOR_AVC
The Web Proxy monitored the transaction based on the 
Application settings for the Access Policy group.
MONITOR_CONTINUE_CONTENT_UNSAFE
Originally, the Web Proxy blocked the transaction and 
displayed the Warn and Continue page based on the site 
content ratings settings in the Access Policy group. The 
client request was for adult content and the policy is 
configured to give a warning to users accessing adult 
content. The user accepted the warning and continued to the 
originally requested site, and no other scanning engine 
subsequently blocked the request.
ACL Decision Tag
Description