Cisco Cisco Web Security Appliance S360 User Guide

Page of 606
 
16-10
Cisco IronPort AsyncOS 7.7 for Web User Guide
Chapter 16      Notifying End Users
Defining End-User Notification Pages Off-Box
Then AsyncOS creates the following redirected URL: 
End-User Notification Page Parameters
AsyncOS passes the parameters to the web server as standard URL Parameters in the HTTP GET request. 
It uses the following format:
<notification_page_url>?param1=value1&param2=value2
 
 describes the parameters AsyncOS includes in the query string. 
http://www.example.com/eun.policy.html?Time=21/Jun/
2007:23:22:25%20%2B0000&ID=0000000004&Client_IP=172.17.0.8&User=-
&Site=www.espn.com&URI=index.html&Status_Code=403&Decision_Tag=
BLOCK_WEBCAT-DefaultGroup-DefaultGroup-NONE-NONE-DefaultRouting
&URL_Cat=Sports%20and%20Recreation&WBRS=-&DVS_Verdict=-&
DVS_ThreatName=-&Reauth_URL=-
Table 16-4
End-User Notification Parameters for Redirected URLs 
Parameter Name
Description
Time
Date and time of the transaction.
ID
Transaction ID.
Client_IP
IP address of the client.
User
Username of the client making the request, if available. 
Site
Hostname of the destination in the HTTP request.
URI
URL path specified in the HTTP request.
Status_Code
HTTP status code for the request.
Decision_Tag
ACL decision tag as defined in the Access log entry that indicates how the DVS 
engine handled the transaction.
For more information about ACL decision tags, see 
.
URL_Cat
URL category that the URL filtering engine assigned to the transaction request. 
For a list of the different URL categories, see 
.
Note: AsyncOS for Web sends the entire URL category name for both 
predefined and user defined URL categories. It performs URL encoding on the 
category name, so spaces are written as “%20”. 
WBRS
WBRS score that the Web Reputation Filters assigned to the URL in the request.
DVS_Verdict
Malware category that the DVS engine assigns to the transaction.
For more information about malware categories,