Cisco Cisco Web Security Appliance S690 User Guide

Page of 784
 
Chapter 24      Logging
Access Log File
24-24
Cisco IronPort AsyncOS 7.0 for Web User Guide
OL-23079-01
ACL Decision Tags
An ACL decision tag is a field in an access log entry that indicates how the Web 
Proxy handled the transaction. It includes information from the Web Reputation 
filters, URL categories, and the scanning engines.
Note
The end of the ACL decision tag includes a dynamically generated number that 
the Web Proxy uses internally to increase performance. You can ignore this 
number.
 describes the ACL decision tag values. 
FTP_MISS 
The object was not found in the cache, so it was 
fetched from the origin server. This is used for native 
FTP transactions only.
FTP_REFRESH_HIT 
The object was in the cache, but had expired. The 
proxy fetched the object from the origin server. This 
is used for native FTP transactions only.
FTP_DENIED 
The client request was denied due to Access Policies. 
This is used for native FTP transactions only.
Table 24-6
Transaction Result Codes (continued)
Result Code
Description
Table 24-7
ACL Decision Tag Values 
ACL Decision Tag
Description
ALLOW_ADMIN
The Web Proxy allowed the transaction 
based on Applications settings for the 
Access Policy group.
ALLOW_ADMIN_ERROR_PAGE
The Web Proxy allowed the transaction to an 
IronPort notification page and to any logo 
used on that page.
ALLOW_CUSTOMCAT
The Web Proxy allowed the transaction 
based on custom URL category filtering 
settings for the Access Policy group.