Advanced Threat Protection (ATP)-Protokolle

Protokolle werden nur angezeigt, wenn das Network Protection-Modul abonniert wurde.

Nachrichten-ID	Nachricht
18009	Warnung durch ATP
18010	Verworfen durch ATP

Beispielprotokolle:

6/12/2015 4:05 PM,Notice,10.20.22.173,timezone=""IST"" device_name=""SG135"" device_id=SFDemo1234567890 log_id=086520518009 log_type=""ATP"" log_component=""HTTP Proxy"" log_subtype=""Alert"" priority=Notice protocol=""TCP"" src_port=8173 dst_port=80 sourceip=10.20.21.159 destinationip=202.31.139.173 url=http://202.31.139.173/ threatname=C2/Generic-A eventid=BF9283B5-C043-4483-8063-F890C982AD84 eventtype=""Standard"" login_user="""" process_user="""" ep_uuid= execution_path=""""

6/12/2015 4:05 PM,Warning,10.20.22.173,timezone=""IST"" device_name=""SG135"" device_id=SFDemo1234567890 log_id=086304418010 log_type=""ATP"" log_component=""Security Policy"" log_subtype=""Drop"" priority=Warning protocol=""TCP"" src_port=3361 dst_port=20480 sourceip=10.20.21.159 destinationip=77.91.166.16 url=77.91.166.16 threatname=C2/Generic-A eventid=522D2600-3A66-4A31-A8D8-FFF8C0170F9B eventtype=""Standard"" login_user="""" process_user="""" ep_uuid= execution_path=""""

Keine Produkte gefunden.