Cisco Cisco Web Security Appliance S370 Guía Del Usuario

Descargar
Página de 466
 
21-19
AsyncOS 8.8 for Cisco Web Security Appliances User Guide
 
Chapter 21      Monitor System Activity Through Logs
  Access Log Files
MONITOR_AMW_RESP
The Web Proxy monitored the server response based on the 
Anti-Malware settings for the Access Policy group.
MONITOR_AMW_RESP_URL
The Web Proxy suspects the URL in the HTTP request might 
not be safe, but it monitored the transaction based on the 
Anti-Malware settings for the Access Policy group.
MONITOR_AVC
The Web Proxy monitored the transaction based on the 
Application settings for the Access Policy group.
MONITOR_CONTINUE_CONTENT_UNSAFE
Originally, the Web Proxy blocked the transaction and 
displayed the Warn and Continue page based on the site content 
ratings settings in the Access Policy group. The client request 
was for adult content and the policy is configured to give a 
warning to users accessing adult content. The user accepted the 
warning and continued to the originally requested site, and no 
other scanning engine subsequently blocked the request.
MONITOR_CONTINUE_CUSTOMCAT
Originally, the Web Proxy blocked the transaction and 
displayed the Warn and Continue page based on a custom URL 
category in the Access Policy group configured to “Warn.” The 
user accepted the warning and continued to the originally 
requested site, and no other scanning engine subsequently 
blocked the request.
MONITOR_CONTINUE_WEBCAT 
Originally, the Web Proxy blocked the transaction and 
displayed the Warn and Continue page based on a predefined 
URL category in the Access Policy group configured to “Warn.” 
The user accepted the warning and continued to the originally 
requested site, and no other scanning engine subsequently 
blocked the request.
MONITOR_IDS
The Web Proxy scanned the upload request using either a Data 
Security Policy or an External DLP Policy, but did not block the 
request. It evaluated the request against the Access Policies.
MONITOR_SUSPECT_USER_AGENT 
The Web Proxy monitored the transaction based on the Suspect 
User Agent setting for the Access Policy group.
MONITOR_WBRS 
The Web Proxy monitored the transaction based on the Web 
Reputation filter settings for the Access Policy group.
NO_AUTHORIZATION
The Web Proxy did not allow the user access to the application 
because the user was already authenticated against an 
authentication realm, but not against any authentication realm 
configured in the Application Authentication Policy.
NO_PASSWORD
The user failed authentication.
PASSTHRU_ADMIN
The Web Proxy passed through the transaction based on some 
default settings for the Decryption Policy group.
PASSTHRU_WEBCAT
The Web Proxy passed through the transaction based on URL 
category filtering settings for the Decryption Policy group.
PASSTHRU_WBRS
The Web Proxy passed through the transaction based on the 
Web Reputation filter settings for the Decryption Policy group.
ACL Decision Tag
Description