Cisco Cisco Web Security Appliance S670 User Guide
20-19
AsyncOS 8.5 for Cisco Web Security Appliances User Guide
Chapter 20 Monitor System Activity Through Logs
Access Log Files
DECRYPT_ADMIN
The Web Proxy decrypted the transaction based on some
default settings for the Decryption Policy group.
default settings for the Decryption Policy group.
DECRYPT_WEBCAT
The Web Proxy decrypted the transaction based on URL
category filtering settings for the Decryption Policy group.
category filtering settings for the Decryption Policy group.
DECRYPT_WBRS
The Web Proxy decrypted the transaction based on the Web
Reputation filter settings for the Decryption Policy group.
Reputation filter settings for the Decryption Policy group.
DEFAULT_CASE
The Web Proxy allowed the client to access the server
because none of the AsyncOS services, such as Web
Reputation or anti-malware scanning, took any action on
the transaction.
because none of the AsyncOS services, such as Web
Reputation or anti-malware scanning, took any action on
the transaction.
DROP_ADMIN
The Web Proxy dropped the transaction based on some
default settings for the Decryption Policy group.
default settings for the Decryption Policy group.
DROP_WEBCAT
The Web Proxy dropped the transaction based on URL
category filtering settings for the Decryption Policy group.
category filtering settings for the Decryption Policy group.
DROP_WBRS
The Web Proxy dropped the transaction based on the Web
Reputation filter settings for the Decryption Policy group.
Reputation filter settings for the Decryption Policy group.
MONITOR_AMP_RESP
The Web Proxy monitored the server response based on the
Advanced Malware Protection settings for the Access
Policy group.
Advanced Malware Protection settings for the Access
Policy group.
MONITOR_AMW_RESP
The Web Proxy monitored the server response based on the
Anti-Malware settings for the Access Policy group.
Anti-Malware settings for the Access Policy group.
MONITOR_AMW_RESP_URL
The Web Proxy suspects the URL in the HTTP request
might not be safe, but it monitored the transaction based on
the Anti-Malware settings for the Access Policy group.
might not be safe, but it monitored the transaction based on
the Anti-Malware settings for the Access Policy group.
MONITOR_AVC
The Web Proxy monitored the transaction based on the
Application settings for the Access Policy group.
Application settings for the Access Policy group.
MONITOR_CONTINUE_CONTENT_UNSAFE
Originally, the Web Proxy blocked the transaction and
displayed the Warn and Continue page based on the site
content ratings settings in the Access Policy group. The
client request was for adult content and the policy is
configured to give a warning to users accessing adult
content. The user accepted the warning and continued to the
originally requested site, and no other scanning engine
subsequently blocked the request.
displayed the Warn and Continue page based on the site
content ratings settings in the Access Policy group. The
client request was for adult content and the policy is
configured to give a warning to users accessing adult
content. The user accepted the warning and continued to the
originally requested site, and no other scanning engine
subsequently blocked the request.
MONITOR_CONTINUE_CUSTOMCAT
Originally, the Web Proxy blocked the transaction and
displayed the Warn and Continue page based on a custom
URL category in the Access Policy group configured to
“Warn.” The user accepted the warning and continued to the
originally requested site, and no other scanning engine
subsequently blocked the request.
displayed the Warn and Continue page based on a custom
URL category in the Access Policy group configured to
“Warn.” The user accepted the warning and continued to the
originally requested site, and no other scanning engine
subsequently blocked the request.
MONITOR_CONTINUE_WEBCAT
Originally, the Web Proxy blocked the transaction and
displayed the Warn and Continue page based on a
predefined URL category in the Access Policy group
configured to “Warn.” The user accepted the warning and
continued to the originally requested site, and no other
scanning engine subsequently blocked the request.
displayed the Warn and Continue page based on a
predefined URL category in the Access Policy group
configured to “Warn.” The user accepted the warning and
continued to the originally requested site, and no other
scanning engine subsequently blocked the request.
ACL Decision Tag
Description