Cisco Cisco Web Security Appliance S670 User Guide
82
S A W M I L L F O R I R O N P O R T 7 . 3 . 2 U S E R G U I D E
Note — Sawmill for IronPort does not import any script or file name information.
View Which Content Was Blocked
1. In the Profile, choose the Individual Fields > FIELD: Action report.
2. In the report, click the TCP_DENIED link.
3. On the Overview report page in the Zoom To Report menu, select the FIELD: MIME Type
report.
WSA_Sawmill.book Page 82 Monday, March 15, 2010 10:31 AM