Cisco Cisco Web Security Appliance S360 User Guide

By default, the Web Security appliance has one log subscription created for Web Proxy logging 
messages, the “Default Proxy Logs.” The Web Proxy information stored in this log covers all aspects, or 
modules, of the Web Proxy. The appliance also includes log file types for each Web Proxy module so 
you can read more specific debug information for each module without cluttering up the Default Proxy 
Logs.

If a user or administrator encounters an issue with the Web Proxy behavior, read the Default Proxy Logs 
first. If you see a log entry that you suspect might be the symptom of an issue, then you can create a log 
subscription for the relevant specific Web Proxy module. Then read that proxy log to help troubleshoot 
the problem.

You can create log subscriptions of these proxy module logs in web interface or in the CLI. However, 
you can only create the Request Debug Logs in the CLI.

The following list includes all Web Proxy module log types:

Access Control Engine Logs

AVC Engine Framework Logs

Configuration Logs

Connection Management Logs

Data Security Module Logs

DCA Engine Framework Logs

Disk Manager Logs

FTP Proxy Logs

HTTPS Logs

License Module Logs

Logging Framework Logs

McAfee Integration Framework Logs

Memory Manager Logs

Miscellaneous Proxy Modules Logs

Request Debug Logs

SNMP Module Logs

Sophos Integration Framework Logs

WBRS Framework Logs

WCCP Module Logs

Webcat Integration Framework Logs

Webroot Integration Framework Logs

For a description of each log type, see Table 24-1, `Default Log File Types,' on page 2.