Cisco Cisco Web Security Appliance S670 Mode D'Emploi
21-19
AsyncOS 8.7 for Cisco Web Security Appliances User Guide
Chapter 21 Monitor System Activity Through Logs
Access Log Files
MONITOR_AMW_RESP
The Web Proxy monitored the server response based on the
Anti-Malware settings for the Access Policy group.
Anti-Malware settings for the Access Policy group.
MONITOR_AMW_RESP_URL
The Web Proxy suspects the URL in the HTTP request might
not be safe, but it monitored the transaction based on the
Anti-Malware settings for the Access Policy group.
not be safe, but it monitored the transaction based on the
Anti-Malware settings for the Access Policy group.
MONITOR_AVC
The Web Proxy monitored the transaction based on the
Application settings for the Access Policy group.
Application settings for the Access Policy group.
MONITOR_CONTINUE_CONTENT_UNSAFE
Originally, the Web Proxy blocked the transaction and
displayed the Warn and Continue page based on the site content
ratings settings in the Access Policy group. The client request
was for adult content and the policy is configured to give a
warning to users accessing adult content. The user accepted the
warning and continued to the originally requested site, and no
other scanning engine subsequently blocked the request.
displayed the Warn and Continue page based on the site content
ratings settings in the Access Policy group. The client request
was for adult content and the policy is configured to give a
warning to users accessing adult content. The user accepted the
warning and continued to the originally requested site, and no
other scanning engine subsequently blocked the request.
MONITOR_CONTINUE_CUSTOMCAT
Originally, the Web Proxy blocked the transaction and
displayed the Warn and Continue page based on a custom URL
category in the Access Policy group configured to “Warn.” The
user accepted the warning and continued to the originally
requested site, and no other scanning engine subsequently
blocked the request.
displayed the Warn and Continue page based on a custom URL
category in the Access Policy group configured to “Warn.” The
user accepted the warning and continued to the originally
requested site, and no other scanning engine subsequently
blocked the request.
MONITOR_CONTINUE_WEBCAT
Originally, the Web Proxy blocked the transaction and
displayed the Warn and Continue page based on a predefined
URL category in the Access Policy group configured to “Warn.”
The user accepted the warning and continued to the originally
requested site, and no other scanning engine subsequently
blocked the request.
displayed the Warn and Continue page based on a predefined
URL category in the Access Policy group configured to “Warn.”
The user accepted the warning and continued to the originally
requested site, and no other scanning engine subsequently
blocked the request.
MONITOR_IDS
The Web Proxy scanned the upload request using either a Data
Security Policy or an External DLP Policy, but did not block the
request. It evaluated the request against the Access Policies.
Security Policy or an External DLP Policy, but did not block the
request. It evaluated the request against the Access Policies.
MONITOR_SUSPECT_USER_AGENT
The Web Proxy monitored the transaction based on the Suspect
User Agent setting for the Access Policy group.
User Agent setting for the Access Policy group.
MONITOR_WBRS
The Web Proxy monitored the transaction based on the Web
Reputation filter settings for the Access Policy group.
Reputation filter settings for the Access Policy group.
NO_AUTHORIZATION
The Web Proxy did not allow the user access to the application
because the user was already authenticated against an
authentication realm, but not against any authentication realm
configured in the Application Authentication Policy.
because the user was already authenticated against an
authentication realm, but not against any authentication realm
configured in the Application Authentication Policy.
NO_PASSWORD
The user failed authentication.
PASSTHRU_ADMIN
The Web Proxy passed through the transaction based on some
default settings for the Decryption Policy group.
default settings for the Decryption Policy group.
PASSTHRU_WEBCAT
The Web Proxy passed through the transaction based on URL
category filtering settings for the Decryption Policy group.
category filtering settings for the Decryption Policy group.
PASSTHRU_WBRS
The Web Proxy passed through the transaction based on the
Web Reputation filter settings for the Decryption Policy group.
Web Reputation filter settings for the Decryption Policy group.
ACL Decision Tag
Description