M86 Security M86 Threat Analysis Reporter, Руководство пользователя

Страница: 716 / 938

SR P
RODUCTIVITY
R
EPORTS
S
ECTION
C
HAPTER
2: D
RILL
D
OWN
R
EPORTS
688
M86 S
ECURITY
U
SER
G
UIDE
• User IP - Displays the IP address of the user’s machine
(e.g. “200.10.101.80”).
• User - Displays any of the following information: user-
name, user IP address, or the path and username (e.g.
“logo\admin\jsmith”).
• Site - Displays the URL the user attempted to access
(e.g. “coors.com”).
• Filter Action - Displays the type of filter action used by
the Web Filter in creating the record: "Allowed",
"Blocked", "Warn Blocked" (for the first warning page that
displayed for the end user), "Warn Allowed" (for any
subsequent warning page that displayed for the end
user), “Quota Blocked” (if a quota blocked the end user),
"X-Strike", or "N/A" if the filter action was unclassified at
the time the log file was created.
• Content Type - Displays the method used by the Web
Filter in creating the record: “Search KW” (Search Engine
Keyword), “URL KW” (URL Keyword), “URL”, “Wildcard”,
“Https High” (HTTPS Filtering Level set at High), “X-
strike” (X Strikes Blocking), “Pattern” (Proxy Pattern
Blocking), “File Type”, “Https Medium” (HTTPS Filtering
Level set at Medium), or “N/A” if the content was unclas-
sified at the time the log file was created.
• Content - Displays criteria used for determining the cate-
gorization of the record, or “N/A” if unclassified.
• Search String - Displays the full search string the end
user typed into a search engine text box in search sites
such as Google, Bing, Yahoo!, MSN, AOL, Ask.com,
YouTube.com, and MySpace.com—if the Search Engine
Reporting option is enabled in the Optional Features
screen of the System Configuration administrator
console user interface.