DescriptionField
Matched URI category ID (e.g. 0x2n00000034).The n indicates the risk level: 0=unclassified,
1=trusted, 2=low, 3=medium, and 4=high. For a full listing of the values used with the cat key,
see the section Category Codes on page 222 below.
cat
Application identified by the appliance.app
Reason code that identifies why a particular request was blocked.The supported codes are
listed below; however, this list is subject to change.
1401 = Blocked because request contains a virus,
1402 = Blocked by Local or Sophos URI list,
1403 = Blocked by file type,
1404 = Blocked because the request is encrypted and could not be scanned,
1405 = Blocked because the virus scanner timed out when trying to scan the request,
1406 = Blocked by policy,
1407 = Blocked because the originating server failed SSL certificate validation,
1408 = Blocked ‘Range’ requests,
1409 = Blocked by tag.
1410 = Blocked (Lookup failed)
1411 = Blocked because of application control.
1412 = Blocked by Sandstorm
rsn
Malware/Virus name detected by the scanner.threat
MIME type identified by the appliance.type
Content-Type indicated by the originating server.ctype
Sophos Anti-virus engine version used for this request.sav-ev
Sophos Anti-virus data version used for this request.sav-dv
Sophos URI list version used for this request.uri-dv
Cache HIT or MISS (whether the request was served from the appliance cache).cache
Amount of data (including headers, in bytes) received from the client by the appliance for this
request.
in
Amount of data (including headers, in bytes) sent out by the appliance to the client for this
request.
out
HTTP request method (i.e. POST/GET/CONNECT).meth
Sophos Web Appliance | Interpreting Log Files | 219
To Next Page
Loading...
Need help?
General
