Application Filter Logs. Sophos XG Firewall

Sophos XG Firewall | Appendix A - Logs | 531

Application Filter Logs

Logs are displayed only if Web Protection Module is subscribed.

Message ID

17051

Message

Application access was denied according to application filter policy

Module-specific Fields

Data Fields

fw_rule_id user user_group application_policy_id category app_name app_risk app_technology application_category src_ip src_country dst_ip dst_country protocol src_port

Type

integer string string integer string string integer string string string string string integer integer integer

Description

Firewall Rule ID which is applied on the traffic

User name

Group name to which the user belongs.

Application Filter Policy ID applied on the traffic

Name of the category under which application falls

Name of the application accessed

Risk level assigned to the application

1 - VERY LOW

2 - LOW

3 - MEDIUM

4 - HIGH

5 - VERY HIGH

Technology of the application

Browser Based

Client Server

Network Protocol

P2P

Name of the category under which application falls

Original Source IP address of traffic

Code of the country to which the source

IP belongs

Original Destination IP address of traffic

Code of the country to which the destination IP belongs

Protocol number of traffic

Original Source Port of TCP and UDP traffic