Cisco Cisco Web Security Appliance S660 Mode D'Emploi
444
I R O N P O R T A S Y N C O S 6 . 3 F O R W E B U S E R G U I D E
-
1
A value that McAfee uses as a virus type. IronPort
Customer Support may use this value when
troubleshooting an issue.
Applies to responses detected by McAfee only.
Customer Support may use this value when
troubleshooting an issue.
Applies to responses detected by McAfee only.
-
Generic
Downloader.ab
Downloader.ab
The name of the virus that McAfee scanned.
Applies to responses detected by McAfee only.
Applies to responses detected by McAfee only.
0
0
The IronPort Data Security scan verdict based on the
action in the Content column of the IronPort Data
Security Policy.
The following list describes the possible values for this
field:
• 0. Allow
• 1. Block
• - (hyphen). No scanning was initiated by the
action in the Content column of the IronPort Data
Security Policy.
The following list describes the possible values for this
field:
• 0. Allow
• 1. Block
• - (hyphen). No scanning was initiated by the
IronPort Data Security Filters. This value appears
when the IronPort Data Security Filters is disabled or
when the URL category action is set to Allow.
when the IronPort Data Security Filters is disabled or
when the URL category action is set to Allow.
0
0
The External DLP scan verdict based on the result given
in the ICAP response.
The following list describes the possible values for this
field:
• 0. Allow
• 1. Block
• - (hyphen). No scanning was initiated by the
in the ICAP response.
The following list describes the possible values for this
field:
• 0. Allow
• 1. Block
• - (hyphen). No scanning was initiated by the
external DLP server. This value appears when
External DLP scanning is disabled or when the
content was not scanned due to an exempt URL
category on the External DLP Policies > Destinations
page.
External DLP scanning is disabled or when the
content was not scanned due to an exempt URL
category on the External DLP Policies > Destinations
page.
IW_adv
nc
The URL category verdict determined during
request-side scanning, abbreviated. Applies to both
IronPort URL Filters and Cisco IronPort Web Usage
Controls URL filtering engines.
This field lists a hyphen ( - ) when URL filtering is
disabled.
For a list of URL category abbreviations, see “URL
Category Descriptions” on page 293.
request-side scanning, abbreviated. Applies to both
IronPort URL Filters and Cisco IronPort Web Usage
Controls URL filtering engines.
This field lists a hyphen ( - ) when URL filtering is
disabled.
For a list of URL category abbreviations, see “URL
Category Descriptions” on page 293.
Table 20-8 Access Log File Entry — Web Reputation and Anti-Malware Information (Continued)
Field Value
Example 1
Example 1
Field Value
Example 2
Example 2
Description