Troubleshooting Cisco WSA Behavior: Policy Trace Tool

Understanding Cisco WSA Policy Trace Tool

Question

Which behavior is seen while the policy trace tool is used to troubleshoot a Cisco WSA?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

D.

https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-0/user_guide/b_WSA_UserGuide/

The Cisco Web Security Appliance (WSA) is a security solution that provides web filtering, malware protection, and data loss prevention for enterprise networks. The Policy Trace Tool is a troubleshooting tool in the WSA that allows administrators to trace the path of a client request through the appliance and to identify any issues that may be causing problems with the request.

Answer B is the correct answer. When the policy trace tool is used to troubleshoot a Cisco WSA, a real client request is processed, and an EUN (Error User Notification) page is displayed. The EUN page displays the policy that was applied to the request and any errors or warnings that were encountered during the policy evaluation process.

Answer A is incorrect. The policy trace tool does not evaluate external DLP (Data Loss Prevention) policies. DLP policies are used to prevent sensitive data from being leaked or lost through the web traffic.

Answer C is also incorrect. The policy trace tool does not evaluate SOCKS (Socket Secure) policies. SOCKS is a protocol used to route network traffic between client and server through a proxy server.

Answer D is also incorrect. The policy trace tool does not affect the access log of the web proxy. The access log records all client requests and responses passing through the web proxy, including the policy trace test requests.