Message ID: 28738
Message Description: LOGID_APP_CTRL_DETECT_L2
Message Meaning: Ethernet protocols detection
Type: APP-CTRL
Category: signature
Severity: Warning
|
Log Field Name |
Description |
Data Type |
Length |
|---|---|---|---|
|
srcmac |
|
string |
17 |
|
ethertype |
|
uint16 |
10 |
|
dstmac |
|
string |
17 |
|
usecase |
|
string |
64 |
|
trueclntip |
True-Client-IP |
ip |
39 |
|
srczone |
|
string |
32 |
|
scertissuer |
server certificate issuer |
string |
64 |
|
scertcname |
server certificate name |
string |
64 |
|
rawdataid |
|
string |
10 |
|
rawdata |
Extended logging data including HTTP method, URL, client content type, server content type, user agent, referer, x-forwarded-for |
string |
20480 |
|
prompt |
|
string |
512 |
|
poluuid |
|
string |
37 |
|
policytype |
|
string |
24 |
|
policymode |
|
string |
8 |
|
parameters |
|
string |
512 |
|
msg |
Log message |
string |
512 |
|
model |
|
string |
64 |
|
forwardedfor |
Forwarded For |
string |
128 |
|
filename |
File name |
string |
256 |
|
dstzone |
|
string |
32 |
|
dcgeo |
|
string |
64 |
|
crscore |
Client Reputation Score |
uint32 |
10 |
|
crlevel |
Client Reputation Level |
string |
10 |
|
craction |
Client Reputation Action |
uint32 |
10 |
|
clouduser |
User login ID detected by the Deep Application Control feature |
string |
256 |
|
cloudgenai |
|
string |
1024 |
|
clouddevice |
|
string |
256 |
|
ccertissuer |
|
string |
64 |
|
apprisk |
Application risk level |
string |
16 |
|
appid |
Application ID |
uint32 |
10 |
|
aiuser |
|
string |
64 |
|
vrf |
Virtual Routing Forwarding |
uint16 |
3 |
|
vd |
Virtual domain name |
string |
32 |
|
tz |
|
string |
5 |
|
type |
Log type |
string |
16 |
|
time |
Time |
string |
8 |
|
subtype |
Log subtype |
string |
20 |
|
srcintfrole |
Source Interface's assigned role (LAN, WAN, etc.) |
string |
10 |
|
srcintf |
Source Interface |
string |
64 |
|
profiletype |
Profile Type |
string |
36 |
|
profilegroup |
|
string |
48 |
|
profile |
|
string |
36 |
|
policyid |
Policy ID |
uint32 |
10 |
|
logid |
Log ID |
string |
10 |
|
level |
Log level |
string |
11 |
|
eventtype |
App Control Event Type |
string |
32 |
|
eventtime |
Event Time |
uint64 |
20 |
|
dstintfrole |
Destination Interface's assigned role (LAN, WAN, etc.) |
string |
10 |
|
dstintf |
Destination Interface |
string |
64 |
|
devid |
Deivce ID |
string |
16 |
|
date |
Date |
string |
10 |
|
appcat |
Application category name |
string |
64 |
|
app |
Application name |
string |
96 |
|
action |
The status of the session: pass - Application is allowed block - Application is blocked (silent) reject - Quarantine reset - Application is blocked and Reset was sent Sometimes, there is a block page for blocking |
string |
16 |