What Actions can be reported on in detail drill-down reports?


This article applies to:

  • Security Reporter 3.3.x
  • WFR 5.1.10 through 5.1.30

Question:

  • What Actions can be reported on in detail drill-down reports?
  • What are the possible values in the Actions column in detail drill down reports?

Information:

The Actions that could be shown depend on whether the report is for Web Filter data, or SWG data.

  • For Web Filter data, this column displays the type of filter action applied by the Web Filter and additional details, if applicable. The filtering method could be one of the following:
    • Search KW (Search Keyword)
    • URL KW (URL Keyword)
    • URL
    • Wildcard (URL wildcard)
    • Strict HTTPS
    • Moderate HTTPS
    • X-Strike
    • Pattern
    • File Type

    The additional details would include the URL or keyword for the filtering method applied. For example: Wildcard:HTTPS://*.google.com
  • For SWG data, this column displays the type of action applied by SWG. Among the many possible actions are Block, Bypass Scanning, Allow content and scan containers, Unknown, and None.
  • Blocked items display in red text. You can also choose to show a Blocked column (displaying True or False).

You can use the Report Wizard to create reports filtered on any Action. For Web Filter data, the Action selection includes a menu of the available filtering methods.

Notes:

  • Earlier versions of the SR and WFR Administrator Guide contained inaccurate or incomplete information about the Actions.
  • To obtain the latest version of the Administrator Guide for any product version, see the SR or WFR sections in Downloads and Documentation.

Last Modified 6/25/2015.
https://support.trustwave.com/kb/KnowledgebaseArticle20305.aspx