Sophos XG Firewall | Appendix A - Logs | 531
Application Filter Logs
Logs are displayed only if Web Protection Module is subscribed.
Message ID
17051
Message
Application access was denied according to application filter policy
Module-specific Fields
Data Fields
fw_rule_id user user_group application_policy_id category app_name app_risk app_technology application_category src_ip src_country dst_ip dst_country protocol src_port
Type
integer string string integer string string integer string string string string string integer integer integer
Description
Firewall Rule ID which is applied on the traffic
User name
Group name to which the user belongs.
Application Filter Policy ID applied on the traffic
Name of the category under which application falls
Name of the application accessed
Risk level assigned to the application
1 - VERY LOW
2 - LOW
3 - MEDIUM
4 - HIGH
5 - VERY HIGH
Technology of the application
Browser Based
Client Server
Network Protocol
P2P
Name of the category under which application falls
Original Source IP address of traffic
Code of the country to which the source
IP belongs
Original Destination IP address of traffic
Code of the country to which the destination IP belongs
Protocol number of traffic
Original Source Port of TCP and UDP traffic
