Sophos XG Firewall Web Interface Reference and Admin Guide v16.5

| Appendix A - Logs | 550 device="SFW" date=2017-01-31 time=18:28:25 timezone="IST" device_name="CR750iNG-XP" device_id=C44310050024-P29PUA log_id=041107413001 log_type="Anti-Spam" log_component="SMTP" log_subtype="Spam" status="" priority=Warning fw_rule_id=0 user_name="jsmith" av_policy_name="jsmith235" from_email_address="jsmith@

iview.com

" to_email_address="[email protected]" email_subject="RPD Spam Test:

Spam" mailid="c000000b-1485867502" mailsize=400 spamaction="DROP" reason="" src_domainname="

iview.com

" dst_domainname="" src_ip=10.198.47.71 src_country_code=R1 dst_ip=10.198.233.61 dst_country_code=R1 protocol="TCP" src_port=22258 dst_port=25 sent_bytes=0 recv_bytes=0 quarantine_reason="Spam" device="SFW" date=2017-01-31 time=18:31:11 timezone="IST" device_name="CR750iNG-XP" device_id=C44310050024-P29PUA log_id=041207414001 log_type="Anti-Spam" log_component="POP3" log_subtype="Spam" status="" priority=Warning fw_rule_id=0 user_name="jsmith" av_policy_name="jsmith" from_email_address="[email protected]" to_email_address="[email protected]" email_subject="RPD Spam

Test: Spam" mailid="<2a2dd5d4-1a30-617b-27b1-7961ad07cf07@

iview.com

>" mailsize=574 spamaction="Accept" reason="" src_domainname="

iview.com

" dst_domainname="

iview.com

" src_ip=10.198.47.71 src_country_code=R1 dst_ip=10.198.233.61 dst_country_code=R1 protocol="TCP" src_port=22333 dst_port=110 sent_bytes=0 recv_bytes=0 quarantine_reason="Other" device="SFW" date=2017-01-31 time=18:34:41 timezone="IST" device_name="CR750iNG-XP" device_id=C44310050024-P29PUA log_id=041113413005 log_type="Anti-Spam" log_component="SMTP" log_subtype="Outbound Spam" status="" priority=Warning fw_rule_id=0 user_name="jsmith" av_policy_name="jsmith123" from_email_address="[email protected]" to_email_address="[email protected]" email_subject="RPD Spam Test: Spam" mailid="<[email protected]>" mailsize=405 spamaction="Accept" reason="" src_domainname="

iview.com

" dst_domainname="" src_ip=10.198.47.71 src_country_code=R1 dst_ip=10.198.233.61 dst_country_code=R1 protocol="TCP" src_port=22420 dst_port=25 sent_bytes=0 recv_bytes=0 quarantine_reason="Spam" device="SFW" date=2017-01-31 time=18:36:22 timezone="IST" device_name="CR750iNG-XP" device_id=C44310050024-P29PUA log_id=041105613003 log_type="Anti-Spam" log_component="SMTP" log_subtype="Clean" status="" priority=Information fw_rule_id=0 user_name="jsmith" av_policy_name="None" from_email_address="[email protected]" to_email_address="jsmith1@

iview.com

" email_subject="EMAIL" mailid="<5ab27db7-7bac-82e2-ba40-83ce90577c7f@

iview.com

>" mailsize=398 spamaction="Accept" reason="" src_domainname="

iview.com

" dst_domainname="" src_ip=10.198.47.71 src_country_code=R1 dst_ip=10.198.233.61 dst_country_code=R1 protocol="TCP" src_port=22477 dst_port=25 sent_bytes=0 recv_bytes=0 quarantine_reason="Other" device="SFW" date=2017-01-31 time=18:36:29 timezone="IST" device_name="CR750iNG-XP" device_id=C44310050024-P29PUA log_id=041205614003 log_type="Anti-Spam" log_component="POP3" log_subtype="Clean" status="" priority=Information fw_rule_id=0 user_name="jsmith" av_policy_name="None" from_email_address="[email protected]" to_email_address="jsmith1@

iview.com

" email_subject="EMAIL" mailid="<5ab27db7-7bac-82e2-ba40-83ce90577c7f@

iview.com

>" mailsize=1208 spamaction="Accept" reason="" src_domainname="

iview.com

" dst_domainname="

iview.com

" src_ip=10.198.47.71 src_country_code=R1 dst_ip=10.198.233.61 dst_country_code=R1 protocol="TCP" src_port=22479 dst_port=110 sent_bytes=0 recv_bytes=0 quarantine_reason="Other"

Module-specific Fields

Data Fields Type

status firewall_rule_id user_name av_policy_name string integer string string from_email_address string

Description

Ultimate status of traffic – Allowed or Denied

Firewall Rule ID which is applied on the traffic

User name

Spam policy name which is applied on the traffic

Sender email address