We were doing some troubleshooting with Cisco and to see which WSA's had current traffic through them they told us about the rate command.
I've never seen this before and was curious what hits/blocks/misses mean?
I'm assuming blocks is blocked URL's. Misses may be URL we set to bypass decryption ( in QRadar URL's show TCP MISS SSL.
Was curious if anyone has any answers. the Techs on the phone weren't sure what the contents of the command meant.
