Cisco Cisco Web Security Appliance S170 사용자 가이드

An ACL decision tag is a field in an access log entry that indicates how the Web Proxy handled the 
transaction. It includes information from the Web Reputation filters, URL categories, and the scanning 
engines.

The end of the ACL decision tag includes a dynamically generated number that the Web Proxy uses 
internally to increase performance. You can ignore this number.

 describes the ACL decision tag values. 

TCP_DENIED

The client request was denied due to Access Policies.

NONE

There was an error in the transaction. For example, a DNS failure or 
gateway timeout.

ALLOW_ADMIN

The Web Proxy allowed the transaction based on 
Applications settings for the Access Policy group.

ALLOW_ADMIN_ERROR_PAGE

The Web Proxy allowed the transaction to an IronPort 
notification page and to any logo used on that page.

ALLOW_CUSTOMCAT

The Web Proxy allowed the transaction based on custom 
URL category filtering settings for the Access Policy group.

ALLOW_WBRS 

The Web Proxy allowed the transaction based on the Web 
Reputation filter settings for the Access Policy group.

BLOCK_ADMIN 

The Web Proxy blocked the transaction based on 
Applications or Objects settings for the Access Policy 
group.

BLOCK_ADMIN_CONNECT

The Web Proxy blocked the transaction based on the TCP 
port of the destination as defined in the HTTP CONNECT 
Ports setting for the Access Policy group.

BLOCK_ADMIN_CUSTOM_USER_AGENT

The Web Proxy blocked the transaction based on the user 
agent as defined in the Block Custom User Agents setting 
for the Access Policy group.

BLOCK_ADMIN_IDS

The Web Proxy blocked the transaction based on the MIME 
type of the request body content as defined in the Data 
Security Policy group.

BLOCK_ADMIN_FILE_TYPE

The Web Proxy blocked the transaction based on the file 
type as defined in the Access Policy group.

BLOCK_ADMIN_PROTOCOL

The Web Proxy blocked the transaction based on the 
protocol as defined in the Block Protocols setting for the 
Access Policy group.