300-725 · Question #1
Which response code in the access logs indicates that a transaction was blocked due to policy?
The correct answer is A. TCP_DENIED/407. In Cisco WSA access logs, TCP_DENIED/407 indicates a transaction was blocked because the proxy requires authentication - a policy-based denial. HTTP 407 means 'Proxy Authentication Required,' meaning the client must authenticate with the proxy before the request can be…
Question
Which response code in the access logs indicates that a transaction was blocked due to policy?
Options
- ATCP_DENIED/407
- BTCP_DENIED/401
- CTCP_DENIED/403
- DTCP_DENIED/307
How the community answered
(33 responses)- A88% (29)
- B6% (2)
- C3% (1)
- D3% (1)
Explanation
In Cisco WSA access logs, TCP_DENIED/407 indicates a transaction was blocked because the proxy requires authentication - a policy-based denial. HTTP 407 means 'Proxy Authentication Required,' meaning the client must authenticate with the proxy before the request can be fulfilled. This is distinct from 403 (Forbidden, access denied to a resource) and 401 (Unauthorized, credential issue with the origin server). TCP_DENIED/307 is a redirect code and not used for blocking. When an identification or access policy enforces proxy authentication and the client hasn't satisfied it, the WSA logs the result as TCP_DENIED/407.
Topics
Community Discussion
No community discussion yet for this question.