The Blocked Web Access Log screen displays information for Web Reputation queries
that return
malicious results.
Below are the options available on this screen.
-
Keyword: Specify keywords to use when searching for URLs.
-
Date Range: Select a date range.
-
Display Log: Select one or more lists to display the corresponding
logs.
-
Blocked URL List: Displays blocked URLs that match entries in the
Trend Micro Smart Protection Server Blocked URL List.
-
Web Blocking List: Displays blocked URLs that match entries in the
Smart Protection Network Web Blocking List.
-
C&C List: Displays blocked URLs that match entries in the
following lists:
- User-defined Suspicious URL List: A subset of the User-defined
Suspicious Objects List in Control Manager
- Virtual Analyzer Suspicious URL List: A subset of the Suspicious
Objects List in Virtual Analyzer enabled products such as Deep Discovery Advisor and
Deep
Discovery Analyzer
- Global Intelligence List: URLs associated with C&C servers
monitored by the Trend Micro Smart Protection Network.
Below are the details displayed on this screen:
-
Date and time: The date and time of the blocked URL event.
-
URL: The URL that was blocked by Web Reputation.
-
Display Log: The list that contains the blocked URL.
-
Client GUID: The GUID of the computer that attempted to access the
blocked URL.
-
Server GUID: The GUID of the Trend Micro product that supports Smart Protection Servers.
-
Client IP: The IP address of the computer that attempted to access the
blocked URL.
-
Computer: The name of the computer that attempted to access the
blocked URL.
-
Domain: The domain name of the endpoint.
-
Product Entity: The Trend Micro product that detected the URL.