Cisco Cisco Web Security Appliance S160 User Guide
24-20
Cisco IronPort AsyncOS 7.5 for Web User Guide
Chapter 24 Logging
Access Log File
BLOCK_UNSUPPORTED_SEARCH_APP
The Web Proxy blocked the transaction based on the safe
search settings for the Access Policy group. The transaction
was for an unsupported search engine, and the policy is
configured to block unsupported search engines.
search settings for the Access Policy group. The transaction
was for an unsupported search engine, and the policy is
configured to block unsupported search engines.
BLOCK_WBRS
The Web Proxy blocked the transaction based on the Web
Reputation filter settings for the Access Policy group.
Reputation filter settings for the Access Policy group.
BLOCK_WBRS_IDS
The Web Proxy blocked the upload request based on the
Web Reputation filter settings for the Data Security Policy
group.
Web Reputation filter settings for the Data Security Policy
group.
BLOCK_WEBCAT
The Web Proxy blocked the transaction based on URL
category filtering settings for the Access Policy group.
category filtering settings for the Access Policy group.
BLOCK_WEBCAT_IDS
The Web Proxy blocked the upload request based on the
URL category filtering settings for the Data Security Policy
group.
URL category filtering settings for the Data Security Policy
group.
DEFAULT_CASE
The Web Proxy allowed the client to access the server
because none of the AsyncOS services, such as Web
Reputation or anti-malware scanning, took any action on
the transaction.
because none of the AsyncOS services, such as Web
Reputation or anti-malware scanning, took any action on
the transaction.
MONITOR_AMW_RESP
The Web Proxy monitored the server response based on the
Anti-Malware settings for the Access Policy group.
Anti-Malware settings for the Access Policy group.
MONITOR_AMW_RESP_URL
The Web Proxy suspects the URL in the HTTP request
might not be safe, but it monitored the transaction based on
the Anti-Malware settings for the Access Policy group.
might not be safe, but it monitored the transaction based on
the Anti-Malware settings for the Access Policy group.
MONITOR_AVC
The Web Proxy monitored the transaction based on the
Application settings for the Access Policy group.
Application settings for the Access Policy group.
MONITOR_CONTINUE_CONTENT_UNSAFE
Originally, the Web Proxy blocked the transaction and
displayed the Warn and Continue page based on the site
content ratings settings in the Access Policy group. The
client request was for adult content and the policy is
configured to give a warning to users accessing adult
content. The user accepted the warning and continued to the
originally requested site, and no other scanning engine
subsequently blocked the request.
displayed the Warn and Continue page based on the site
content ratings settings in the Access Policy group. The
client request was for adult content and the policy is
configured to give a warning to users accessing adult
content. The user accepted the warning and continued to the
originally requested site, and no other scanning engine
subsequently blocked the request.
MONITOR_CONTINUE_CUSTOMCAT
Originally, the Web Proxy blocked the transaction and
displayed the Warn and Continue page based on a custom
URL category in the Access Policy group configured to
“Warn.” The user accepted the warning and continued to the
originally requested site, and no other scanning engine
subsequently blocked the request.
displayed the Warn and Continue page based on a custom
URL category in the Access Policy group configured to
“Warn.” The user accepted the warning and continued to the
originally requested site, and no other scanning engine
subsequently blocked the request.
MONITOR_CONTINUE_WEBCAT
Originally, the Web Proxy blocked the transaction and
displayed the Warn and Continue page based on a
predefined URL category in the Access Policy group
configured to “Warn.” The user accepted the warning and
continued to the originally requested site, and no other
scanning engine subsequently blocked the request.
displayed the Warn and Continue page based on a
predefined URL category in the Access Policy group
configured to “Warn.” The user accepted the warning and
continued to the originally requested site, and no other
scanning engine subsequently blocked the request.
Table 24-7
ACL Decision Tag Values (continued)
ACL Decision Tag
Description