Cisco Cisco Web Security Appliance S690 Guida Utente
24-2
Cisco IronPort AsyncOS 7.7 for Web User Guide
Chapter 24 Logging
Logging Overview
Log File Types
The log file type indicates what information is recorded in the generated log, such as web traffic or
system data. By default, the Web Security appliance has log subscriptions for most log file types already
created. However, there are some log file types that specific to troubleshooting the Web Proxy. Those
logs are not created by default. For more information on those log file types, see
system data. By default, the Web Security appliance has log subscriptions for most log file types already
created. However, there are some log file types that specific to troubleshooting the Web Proxy. Those
logs are not created by default. For more information on those log file types, see
.
lists the Web Security appliance log file types created by default.
Table 24-1
Default Log File Types
Log File Type
Description
Supports
Syslog Push?
Syslog Push?
Enabled by
Default?
Default?
Access Control
Engine Logs
Engine Logs
Records messages related to the Web Proxy ACL
(access control list) evaluation engine.
(access control list) evaluation engine.
No
No
Access Logs
Records Web Proxy client history.
Yes
Yes
Authentication
Framework Logs
Framework Logs
Records authentication history and messages.
No
Yes
AVC Engine
Framework Logs
Framework Logs
Records messages related to communication
between the Web Proxy and the AVC engine.
between the Web Proxy and the AVC engine.
No
No
AVC Engine Logs
Records debug messages from the AVC engine.
Yes
Yes
CLI Audit Logs
Records a historical audit of command line
interface activity.
interface activity.
Yes
Yes
Configuration Logs Records messages related to the Web Proxy
configuration management system.
No
No
Connection
Management Logs
Management Logs
Records messages related to the Web Proxy
connection management system.
connection management system.
No
No
Data Security Logs
Records client history for upload requests that are
evaluated by the Cisco IronPort Data Security
Filters.
evaluated by the Cisco IronPort Data Security
Filters.
For more information on the data security log, see
.
Yes
Yes
Data Security
Module Logs
Module Logs
Records messages related to the Cisco IronPort
Data Security Filters.
Data Security Filters.
No
No
DCA Engine
Framework Logs
Framework Logs
(Dynamic Content
Analysis)
Analysis)
Records messages related to communication
between the Web Proxy and the Cisco IronPort Web
Usage Controls Dynamic Content Analysis engine.
between the Web Proxy and the Cisco IronPort Web
Usage Controls Dynamic Content Analysis engine.
No
No
DCA Engine Logs
(Dynamic Content
Analysis)
Analysis)
Records messages related to the Cisco IronPort
Web Usage Controls Dynamic Content Analysis
engine.
Web Usage Controls Dynamic Content Analysis
engine.
Yes
Yes