LevelBlue Knowledge Base

KB Home Search Latest Additions Most Popular

HOWTO: Filter Entrapper block transactions in the Web Log

The Malware Entrapment engine, also known as Entrapper, was first introduced with SWG OS 10.1.

1. Go to Logs and Reports > Audit Logs, right-click the selected view and choose View Settings.

2. In the Filter tab, use the settings below to show only Entrapper blocks out of all the log transactions available in the system:

This filter relies on the actual text of the user response action specified for this rule in your policy.

Below is a snapshot of the default End User Message as defined in the Default Security Policy:

And here is the snapshot of the actual text in the message:

If these settings are modified with custom settings make sure to update the suggested filter to reflect the custom settings.

To contact LevelBlue about this article or to request support:

Create a case through the Fusion portal (U.S. Government customers, use the TGS Fusion portal).
Call us on a local phone number.

Rate this Article:

Tags:

Comment submission is disabled for anonymous users.
Please send feedback to Trustwave Technical Support or the Webmaster.

Execution: 0.037. 8 queries. Compression Disabled.