User Guide

454
IRONPORT ASYNCOS 6.3 FOR WEB USER GUIDE
x-webcat-req-code-abbr %XQ The URL category verdict determined during
request-side scanning, abbreviated.
Applies to both IronPort URL Filters and
Cisco IronPort Web Usage Controls URL
filtering engines.
x-webcat-req-code-full %XR The URL category verdict determined during
request-side scanning, full name.
Applies to both IronPort URL Filters and
Cisco IronPort Web Usage Controls URL
filtering engines.
N/A %Xa The URL category code (numeric)
determined during response-side scanning.
Applies to the Cisco IronPort Web Usage
Controls URL filtering engine only.
x-webcat-resp-code-abbr %XA The URL category verdict determined during
response-side scanning, abbreviated.
Applies to the Cisco IronPort Web Usage
Controls URL filtering engine only.
x-webcat-resp-code-full %XL The URL category verdict determined during
response-side scanning, full name.
Applies to the Cisco IronPort Web Usage
Controls URL filtering engine only.
x-webroot-scanverdict %Xv Malware scanning verdict from Webroot
x-webroot-spyid %Xs Webroot specific identifier: (Spy ID)
x-webroot-threat-name %Xn Webroot specific identifier: (Threat name)
This field is written with double-quotes in
the access logs.
x-webroot-trace-id %Xi Webroot specific scan identifier: (Trace ID)
x-webroot-trr %Xt Webroot specific identifier: (Threat Risk
Ratio (TRR))
N/A %:<a Wait-time to receive the response from the
Web Proxy authentication process, after the
Web Proxy sent the request.
N/A %:<b Wait-time to write request body to server
after header
Table 20-11 Log Fields in W3C Logs and Format Specifiers in Access Logs (Continued)
W3C Log Field Format Specifier
in Access Logs
Description