Cisco Cisco Web Security Appliance S660 Guida Utente

Pagina di 784
 
24-21
Cisco IronPort AsyncOS 7.0 for Web User Guide
OL-23079-01
Chapter 24      Logging
Access Log File
DIRECT/my.site.com
Code that describes which server was contacted 
for the retrieving the request content. 
Most common values include:
  •
NONE. The Web Proxy had the content, so it 
did not contact any other server to retrieve 
the content.
  •
DIRECT. The Web Proxy went to the server 
named in the request to get the content.
  •
DEFAULT_PARENT. The Web Proxy went 
to its primary parent proxy or an external 
DLP server to get the content. 
text/plain
Response body MIME type.
DEFAULT_CASE_11
 
ACL decision tag. 
Note: The end of the ACL decision tag includes a 
dynamically generated number that the Web 
Proxy uses internally. You can ignore this 
number.
For more information, see 
AccessOrDecryptionPolicy
Access Policy or Decryption Policy group name. 
When the transaction matches the global Access 
Policy or global Decryption Policy, this value is 
“DefaultGroup.”
Any space in the policy group name is replaced 
with an underscore ( _ ).
Identity
 
Identity policy group name.
Any space in the policy group name is replaced 
with an underscore ( _ ).
OutboundMalwareScanning
 
Policy
 
Outbound Malware Scanning Policy group name.
Any space in the policy group name is replaced 
with an underscore ( _ ).
Table 24-5
Access Log File Entry (continued)
Field Value
Field Description