Cisco Cisco Web Security Appliance S170 Guía Del Usuario
Chapter 24 Logging
Access Log File
24-30
Cisco IronPort AsyncOS 7.0 for Web User Guide
OL-23079-01
Understanding Scanning Verdict Information
The access log file entries aggregate and display the results of the various
scanning engines, such as URL filtering, Web Reputation filtering, and
anti-malware scanning. The appliance displays this information in angled
brackets at the end of each access log entry.
scanning engines, such as URL filtering, Web Reputation filtering, and
anti-malware scanning. The appliance displays this information in angled
brackets at the end of each access log entry.
MONITOR_WBRS
The Web Proxy monitored the transaction
based on the Web Reputation filter settings
for the Access Policy group.
based on the Web Reputation filter settings
for the Access Policy group.
NO_AUTHORIZATION
The Web Proxy did not allow the user access
to the SaaS application because the user was
already authenticated against an
authentication realm, but not against any
authentication realm configured in the SaaS
Application Authentication Policy.
to the SaaS application because the user was
already authenticated against an
authentication realm, but not against any
authentication realm configured in the SaaS
Application Authentication Policy.
NO_PASSWORD
The user failed authentication.
REDIRECT_CUSTOMCAT
The Web Proxy redirected the transaction to
a different URL based on a custom URL
category in the Access Policy group
configured to “Redirect.”
a different URL based on a custom URL
category in the Access Policy group
configured to “Redirect.”
SAAS_AUTH
The Web Proxy allowed the user access to
the SaaS application because the user was
authenticated transparently against the
authentication realm configured in the SaaS
Application Authentication Policy.
the SaaS application because the user was
authenticated transparently against the
authentication realm configured in the SaaS
Application Authentication Policy.
OTHER
The Web Proxy did not complete the request
due to an error, such as an authorization
failure, server disconnect, or an abort from
the client.
due to an error, such as an authorization
failure, server disconnect, or an abort from
the client.
Table 24-7
ACL Decision Tag Values (continued)
ACL Decision Tag
Description