Blocked Web Access Log Parent topic

The Blocked Web Access Log screen displays information for Web Reputation queries that return malicious results.
Below are the options available on this screen.
  • Keyword: Specify keywords to use when searching for URLs.
  • Date Range: Select a date range.
  • Display Log: Select one or more lists to display the corresponding logs.
    • Blocked URL List: Displays blocked URLs that match entries in the Trend Micro Smart Protection Server Blocked URL List.
    • Web Blocking List: Displays blocked URLs that match entries in the Smart Protection Network Web Blocking List.
    • C&C List: Displays blocked URLs that match entries in the following lists:
      • User-defined Suspicious URL List: A subset of the User-defined Suspicious Objects List in Control Manager
      • Virtual Analyzer Suspicious URL List: A subset of the Suspicious Objects List in Virtual Analyzer enabled products such as Deep Discovery Advisor and Deep Discovery Analyzer
      • Global Intelligence List: URLs associated with C&C servers monitored by the Trend Micro Smart Protection Network.
Below are the details displayed on this screen:
  • Date and time: The date and time of the blocked URL event.
  • URL: The URL that was blocked by Web Reputation.
  • Display Log: The list that contains the blocked URL.
  • Client GUID: The GUID of the computer that attempted to access the blocked URL.
  • Server GUID: The GUID of the Trend Micro product that supports Smart Protection Servers.
  • Client IP: The IP address of the computer that attempted to access the blocked URL.
  • Computer: The name of the computer that attempted to access the blocked URL.
  • Domain: The domain name of the endpoint.
  • Product Entity: The Trend Micro product that detected the URL.