Cisco Cisco Web Security Appliance S690 사용자 가이드
11-16
AsyncOS 9.2 for Cisco Web Security Appliances User Guide
Chapter 11 Monitor System Activity Through Logs
Web Proxy Information in Access Log Files
Transaction Result Codes
Transaction result codes in the access log file describe how the appliance resolves client requests. For
example, if a request for an object can be resolved from the cache, the result code is
example, if a request for an object can be resolved from the cache, the result code is
TCP_HIT
. However,
if the object is not in the cache and the appliance pulls the object from an origin server, the result code
is
is
TCP_MISS
. The following table describes transaction result codes.
ACL Decision Tags
An ACL decision tag is a field in an access log entry that indicates how the Web Proxy handled the
transaction. It includes information from the Web Reputation filters, URL categories, and the
scanning engines.
transaction. It includes information from the Web Reputation filters, URL categories, and the
scanning engines.
Note
The end of the ACL decision tag includes a dynamically generated number that the Web Proxy uses
internally to increase performance. You can ignore this number.
internally to increase performance. You can ignore this number.
The following table describes the ACL decision tag values.
Result Code
Description
TCP_HIT
The object requested was fetched from the disk cache.
TCP_IMS_HIT
The client sent an IMS (If-Modified-Since) request for an object and the
object was found in the cache. The proxy responds with a 304 response.
object was found in the cache. The proxy responds with a 304 response.
TCP_MEM_HIT
The object requested was fetched from the memory cache.
TCP_MISS
The object was not found in the cache, so it was fetched from the origin
server.
server.
TCP_REFRESH_HIT
The object was in the cache, but had expired. The proxy sent an IMS
(If-Modified-Since) request to the origin server, and the server
confirmed that the object has not been modified. Therefore, the
appliance fetched the object from either the disk or memory cache.
(If-Modified-Since) request to the origin server, and the server
confirmed that the object has not been modified. Therefore, the
appliance fetched the object from either the disk or memory cache.
TCP_CLIENT_REFRESH_MISS
The client sent a “don’t fetch response from cache” request by issuing
the ‘Pragma: no-cache’ header. Due to this header from the client, the
appliance fetched the object from the origin server.
the ‘Pragma: no-cache’ header. Due to this header from the client, the
appliance fetched the object from the origin server.
TCP_DENIED
The client request was denied due to Access Policies.
UDP_MISS
The object was fetched from the origin server.
NONE
There was an error in the transaction. For example, a DNS failure or
gateway timeout.
gateway timeout.
ACL Decision Tag
Description
ALLOW_ADMIN_ERROR_PAGE
The Web Proxy allowed the transaction to an notification page
and to any logo used on that page.
and to any logo used on that page.
ALLOW_CUSTOMCAT
The Web Proxy allowed the transaction based on custom URL
category filtering settings for the Access Policy group.
category filtering settings for the Access Policy group.
ALLOW_REFERER
The Web Proxy allowed the transaction based on an
embedded/referred content exemption.
embedded/referred content exemption.
ALLOW_WBRS
The Web Proxy allowed the transaction based on the Web
Reputation filter settings for the Access Policy group.
Reputation filter settings for the Access Policy group.