Traffic Logs Parent topic

Deep Edge logs every session traversing the network. Two log records are saved for each session: when the session starts and when the session ends. From the traffic log, administrators can obtain greater visibility and detailed information about network traffic. The following table has detail information.
Log Item Description Example
Policy name The security policy name for traffic control Default
Hostname The Deep Edge hostname ctm1165
Log time Date and time when recorded 2013-01-22 22:13:15-08:00
Start time The start time of the traffic 2013-01-22 22:12:15 -0800
End time The end time of the traffic 2013-01-22 22:13:15 -0800
Source user The domain user account if Deep Edge is configured as LDAP authentication. Default is empty --
Source address Client IP address 10.64.68.131
Source port Port number 42074
Destination address Server IP address 10.64.1.55
Destination port  Port number 53
Protocol TCP/UDP/ICMP/ICMPv6 UDP
Direction Outbound/Inbound Outbound
Application The application name identified by Deep Edge, such as HTTP/FTP DNS
Violation type Empty if it does not violate any security policies. Otherwise it has same value as Violation type of the Violation Log. --
Action Empty if the action is undecided currently. Otherwise it will be Action/Blocked/Monitor. Allow
URL URL visited by clients, if applicable. --
File name The file name downloaded by clients if applicable. --
Malware name The virus name blocked by an Anti-Malware scan. --
IPS rule The IPS rule name if it is triggered by IPS scan. Default is empty. --
ERS value 1 = blocked by ERS; 0 = otherwise 0
WRS score The score of URL queried by WRS, if applicable. The scope is 0 ~ 100. A higher value has a better reputation. 0
URL category The URL category of an HTTP request. Default is empty. --
Mail sender Mail sender of message traffic. Default is empty. --
Mail recipient Mail recipient if it’s message traffic. Default is empty. --
Mail subject Mail subject if it’s message traffic. Default is empty. --