Cisco Cisco Web Security Appliance S670 Mode D'Emploi

Page de 455
 
21-21
AsyncOS 8.7 for Cisco Web Security Appliances User Guide
 
Chapter 21      Monitor System Activity Through Logs
  Access Log Files
6
354385
%Xs
A value that Webroot uses as a threat identifier. Cisco Customer 
Support may use this value when troubleshooting an issue. Applies 
to responses detected by Webroot only.
7
12559
%Xi
A value that Webroot uses as a trace identifier. Cisco Customer 
Support may use this value when troubleshooting an issue. Applies 
to responses detected by Webroot only.
8
-
%Xd
The malware scanning verdict McAfee passed to the DVS engine. 
Applies to responses detected by McAfee only.
For more information, see 
.
9
“-”
“%Xe”
The name of the file McAfee scanned. Applies to responses detected 
by McAfee only.
10
-
%Xf
A value that McAfee uses as a scan error. Cisco Customer Support 
may use this value when troubleshooting an issue. Applies to 
responses detected by McAfee only.
11
-
%Xg
A value that McAfee uses as a detection type. Cisco Customer 
Support may use this value when troubleshooting an issue. Applies 
to responses detected by McAfee only.
12
-
%Xh
A value that McAfee uses as a virus type. Cisco Customer Support 
may use this value when troubleshooting an issue. Applies to 
responses detected by McAfee only.
13
“-”
“%Xj”
The name of the virus that McAfee scanned. Applies to responses 
detected by McAfee only.
14
-
%XY
The malware scanning verdict Sophos passed to the DVS engine. 
Applies to responses detected by Sophos only.
For more information, see 
.
15
-
%Xx
A value that Sophos uses as a scan return code. Cisco Customer 
Support may use this value when troubleshooting an issue. Applies 
to responses detected by Sophos only.
16
“-”
“%Xy”
The file location where Sophos found the objectionable content. For 
non-archive files, this value is the file name itself. For an archive file, 
it is the object in the archive, such as 
archive.zip/virus.exe
Applies to responses detected by Sophos only.
17
“-”
“%Xz”
A value that Sophos uses as the threat name. Cisco Customer Support 
may use this value when troubleshooting an issue. Applies to 
responses detected by Sophos only.
Position Field Value
Format Specifier Description