topic IronPort 7.7 field Explanation "x-acl-added-headers"? in Web Security

IronPort 7.7 field Explanation "x-acl-added-headers"?

saurabhsymc — Fri, 23 Aug 2013 07:25:33 GMT

I am trying to understand a new field "x-acl-added-headers" added in W3C log format of Ironport 7.7 .I have seen the guide but enough information is not given on it.Can any on tell me what exactly this field will contain with an example log and how important it is?

IronPort 7.7 field Explanation "x-acl-added-headers"?

Erik Kaiser — Fri, 23 Aug 2013 19:24:01 GMT

Hi,

You have to set the custom URL to allow.

Sincerely,

Erik Kaiser
WSA CSE
WSA Cisco Forums Moderator

IronPort 7.7 field Explanation "x-acl-added-headers"?

saurabhsymc — Thu, 29 Aug 2013 06:35:12 GMT

my question was what information that field will contain?

IronPort 7.7 field Explanation "x-acl-added-headers"?

Puja Mahapatra — Thu, 29 Aug 2013 18:29:40 GMT

Hi Saurabh,

That field is to log the custom header for youtube (for edutcation), There is a documentation bug #

CSCzv54395 about this and this why you do not see it under the custom field table. FYI : it shows up as -- on the user guide

—

%XP

Unrecognized header. Use this field to log extra headers in client requests. This supports troubleshooting of specialized systems that add headers to client requests as a way of authenticating and redirecting those requests, for example, YouTube for Schools.

We are in the process of fixing this.

I hope this helps.

Regards,

-Puja

IronPort 7.7 field Explanation "x-acl-added-headers"?

saurabhsymc — Wed, 04 Sep 2013 03:41:34 GMT

is it going to give custom header only for youtube(education) or for other websites also?

IronPort 7.7 field Explanation "x-acl-added-headers"?

Puja Mahapatra — Wed, 04 Sep 2013 04:56:26 GMT

Youtube was just an example the feature is implemented for generic use of custom headers. However, the only sites that support this that i am aware of is google and youtube. I hope this helps.

Regards,

-Puja

IronPort 7.7 field Explanation "x-acl-added-headers"?

saurabhsymc — Fri, 06 Sep 2013 06:28:47 GMT

i got your point but it will be good if you can provide example log to give more insight to what header information will it contain exactly.

IronPort 7.7 field Explanation "x-acl-added-headers"?

saurabhsymc — Tue, 10 Sep 2013 07:02:11 GMT

Where i can find the cosolidated list of different Async OS versions supported by Cisco WSA170 , WSA370 , WSA670?

If anyone have it, please mail me on saurabh.saurabh015@gmail.com..