Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -20,6 +20,18 @@ Type: string

Action performed by gateway on the HTTP request.

## ApplicationIDs

Type: array\[int]

IDs of the applications that matched the HTTP request parameters.

## ApplicationNames

Type: array\[string]

Names of the applications that matched the HTTP request parameters.

## BlockedFileHash

Type: string
Expand Down Expand Up @@ -50,6 +62,18 @@ Type: string

File type blocked in the response eg. exe, bin, if any.

## CategoryIDs

Type: array\[int]

IDs of the categories that matched the HTTP request parameters.

## CategoryNames

Type: array\[string]

Names of the categories that matched the HTTP request parameters.

## Datetime

Type: int or string
Expand All @@ -62,6 +86,18 @@ Type: string

Destination ip of the request.

## DestinationIPContinentCode

Type: string

Continent code of the destination IP of the HTTP request (for example, 'NA').

## DestinationIPCountryCode

Type: string

Country code of the destination IP of the HTTP request (for example, 'US').

## DestinationPort

Type: string
Expand Down Expand Up @@ -108,7 +144,55 @@ Email used to authenticate the client.

Type: object

Information about files detected within the HTTP request.
Information about files detected within the HTTP request. The following data is available for each file.

### action

Type: string

Action taken. Possible values are <em>none</em>, <em>allow</em> and <em>block</em>.

### content_type

Type: string

The file's content type (as read from headers), if applicable.

### direction

Type: string

Possible values are <em>upload</em> and <em>download</em>.

### file_name

Type: string

The file's name, if known.

### file_hash

Type: string

The file's sha256 hash as a hex string, if known.

### file_size

Type: int

The file's size, in bytes.

### file_type

Type: string

The file's type (as detected by signatures), if known.

## ForensicCopyStatus

Type: string

Status of any associated forensic copies that may have been captured during the request.

## HTTPHost

Expand Down Expand Up @@ -152,6 +236,24 @@ Type: string

The name of the gateway policy applied to the request, if any.

## PrivateAppAUD

Type: string

The private app AUD, if any.

## ProxyEndpoint

Type: string

The proxy endpoint used on the HTTP request, if any.

## Quarantined

Type: bool

If the request content was quarantined.

## Referer

Type: string
Expand All @@ -176,6 +278,18 @@ Type: string

Source ip of the request.

## SourceIPContinentCode

Type: string

Continent code of the source IP of the request (for example, 'NA').

## SourceIPCountryCode

Type: string

Country code of the source IP of the request (for example, 'US').

## SourceInternalIP

Type: string
Expand Down Expand Up @@ -229,3 +343,15 @@ Contents of the user agent header in the HTTP request.
Type: string

User identity where the HTTP request originated from.

## VirtualNetworkID

Type: string

The identifier of the virtual network the device was connected to, if any.

## VirtualNetworkName

Type: string

The name of the virtual network the device was connected to, if any.
Original file line number Diff line number Diff line change
Expand Up @@ -20,6 +20,18 @@ Type: string

Action performed by gateway on the session.

## ApplicationIDs

Type: array\[int]

IDs of the applications that matched the session parameters.

## ApplicationNames

Type: array\[string]

Names of the applications that matched the session parameters.

## Datetime

Type: int or string
Expand All @@ -32,6 +44,18 @@ Type: string

Destination IP of the network session.

## DestinationIPContinentCode

Type: string

Continent code of the destination IP of the network session (for example, 'NA').

## DestinationIPCountryCode

Type: string

Country code of the destination IP of the network session (for example, 'US').

## DestinationPort

Type: int
Expand Down Expand Up @@ -86,6 +110,12 @@ Type: string

The name of the gateway policy applied to the request, if any.

## ProxyEndpoint

Type: string

The proxy endpoint used on this network session, if any.

## SNI

Type: string
Expand All @@ -104,6 +134,18 @@ Type: string

Source IP of the network session.

## SourceIPContinentCode

Type: string

Continent code of the source IP of the network session (for example, 'NA').

## SourceIPCountryCode

Type: string

Country code of the source IP of the network session (for example, 'US').

## SourceInternalIP

Type: string
Expand All @@ -116,14 +158,32 @@ Type: int

Source port of the network session.

## Transport
## Transport (deprecated)

Type: string

Transport protocol used for this session. <br />Possible values are <em>tcp</em> | <em>quic</em> | <em>udp</em>.
Transport protocol used for this session. <br />Possible values are <em>tcp</em> \| <em>quic</em> \| <em>udp</em>. Deprecated, please use TransportProtocol instead.

## TransportProtocol

Type: string

Transport protocol used for this session. <br />Possible values are <em>tcp</em> \| <em>quic</em> \| <em>udp</em>.

## UserID

Type: string

User identity where the network session originated from.

## VirtualNetworkID

Type: string

The identifier of the virtual network the device was connected to, if any.

## VirtualNetworkName

Type: string

The name of the virtual network the device was connected to, if any.
Loading