Troubleshooting Information from each CAS or ASG log

Products

• Content Analysis Software - CA
• CAS-VA
• CAS-S200
• CAS-S400
• CAS-S500
• Advanced Secure Gateway Software - ASG
• ASG-S200
• ASG-S400
• ASG-S500

Issue/Introduction

The purpose of this article is to provide a list of data logs that can aid with the initial troubleshooting of CAS and ASG scanning conflicts.

You can find the data logs in question as follows:

• CAS appliance -  MC > Utilities > System Logs
• ASG appliance -  ​MC > Content Analysis > Utilities > System Logs

Resolution

cas-connection :

• File scanning verdicts, both malicious and non-malicious. It includes the regular Health Checks from ProxySG devices

cas log :

• Connection failures to subscription services (license) for the antivirus engines
• Successful antivirus engine and pattern updates

clp_alerts.log :

Everything that has been flagged as alert including for example:

• Antivirus engine and pattern updates
• Sandbox discoveries

clp_services.log :

• Status from engine and pattern downloads, both successful and failed

cas-audit :

• Administrator changes made in the management console or through SSH
• Administrator Logins