Windows event log ยท Application4003 Symantec Web and Cloud Access Protection Disabled
- Application
- 1 field
Application.evtxSymantec WSS Traffic Redirection
Fields EvtxECmd extracts
1 column in the EvtxECmd CSV
- PayloadData1
Name: %Data%- %Data% = /Event/EventData/Data
Sample event
Event XML from the map file
<Event>
<System>
<Provider Name="Symantec WSS Traffic Redirection"/>
<EventID Qualifiers="33023">4003</EventID>
<Level>3</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2021-11-24 21:51:05.0000000"/>
<EventRecordID>25360637</EventRecordID>
<Channel>Application</Channel>
<Computer>HPDESKTOP1</Computer>
<Security/>
</System>
<EventData>
<Data>Web and Cloud Access Protection disabled.</Data>
<Binary></Binary>
</EventData>
</Event>References
3 links
- techdocs.broadcom.com/us/en/symantec-security-software/endpoint-security-and-management/endpoint-protection/all/Using-policies-to-manage-security/configuring-network-traffic-redirection.html(opens in new tab)
- techdocs.broadcom.com/us/en/symantec-security-software/endpoint-security-and-management/endpoint-protection/all/Using-policies-to-manage-security/configuring-network-traffic-redirection/wss-traffic-redirection-v124663579-d59e307.html(opens in new tab)
- techdocs.broadcom.com/us/en/symantec-security-software/endpoint-security-and-management/endpoint-protection/all/Using-policies-to-manage-security/configuring-network-traffic-redirection/Verifying-that-Network-Traffic-Redirection-is-enabled-on-the-client.html(opens in new tab)
Source: evtx/Maps/Application_Symantec_4003.map(opens in new tab) by Chris Kudless and contributors(opens in new tab), MIT License(opens in new tab)