Cisco Cisco Web Security Appliance S160 User Guide

Page of 638
 
24-20
Cisco IronPort AsyncOS 7.5 for Web User Guide
Chapter 24      Logging
Access Log File
BLOCK_UNSUPPORTED_SEARCH_APP
The Web Proxy blocked the transaction based on the safe 
search settings for the Access Policy group. The transaction 
was for an unsupported search engine, and the policy is 
configured to block unsupported search engines.
BLOCK_WBRS
The Web Proxy blocked the transaction based on the Web 
Reputation filter settings for the Access Policy group.
BLOCK_WBRS_IDS
The Web Proxy blocked the upload request based on the 
Web Reputation filter settings for the Data Security Policy 
group.
BLOCK_WEBCAT
The Web Proxy blocked the transaction based on URL 
category filtering settings for the Access Policy group.
BLOCK_WEBCAT_IDS
The Web Proxy blocked the upload request based on the 
URL category filtering settings for the Data Security Policy 
group.
DEFAULT_CASE
The Web Proxy allowed the client to access the server 
because none of the AsyncOS services, such as Web 
Reputation or anti-malware scanning, took any action on 
the transaction.
MONITOR_AMW_RESP
The Web Proxy monitored the server response based on the 
Anti-Malware settings for the Access Policy group.
MONITOR_AMW_RESP_URL
The Web Proxy suspects the URL in the HTTP request 
might not be safe, but it monitored the transaction based on 
the Anti-Malware settings for the Access Policy group.
MONITOR_AVC
The Web Proxy monitored the transaction based on the 
Application settings for the Access Policy group.
MONITOR_CONTINUE_CONTENT_UNSAFE
Originally, the Web Proxy blocked the transaction and 
displayed the Warn and Continue page based on the site 
content ratings settings in the Access Policy group. The 
client request was for adult content and the policy is 
configured to give a warning to users accessing adult 
content. The user accepted the warning and continued to the 
originally requested site, and no other scanning engine 
subsequently blocked the request.
MONITOR_CONTINUE_CUSTOMCAT
Originally, the Web Proxy blocked the transaction and 
displayed the Warn and Continue page based on a custom 
URL category in the Access Policy group configured to 
“Warn.” The user accepted the warning and continued to the 
originally requested site, and no other scanning engine 
subsequently blocked the request.
MONITOR_CONTINUE_WEBCAT 
Originally, the Web Proxy blocked the transaction and 
displayed the Warn and Continue page based on a 
predefined URL category in the Access Policy group 
configured to “Warn.” The user accepted the warning and 
continued to the originally requested site, and no other 
scanning engine subsequently blocked the request.
Table 24-7
ACL Decision Tag Values (continued)
ACL Decision Tag
Description