Bluecoat / site categories and denied requests

Hi,

we are currently evaluating FWA v5 and everything is fine so far, except reporting for our bluecoat proxy servers.

I can successfully import the logs, and the FWA recognizes the proxies as "squid". In the logs, there are entries refering to denied requests, for example because of wrong user authentication or because the proxy block access to certain websites/categories.

These lines do not appear in the denied user/sites reports (these are empty). Im also not able to create a custom report, because I cannot find the fields that are needed to create a query for that.

To verify, please find below a sample log entry (some entried modified due to posting rules):

SOMEDAY 18:48:30 1 SOMEIPADDRESS 403 TCP_DENIED 1834 408 GET http DENIEDURL 80 SOMEURI - SOMEUSER SOMEAUTHDOMAIN NONE - - REFERRERURL "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)" DENIED "Advertisements & Popups" - PROXYIP

Basically, I'd like to report on denied sites, categories users and authentication domains.

Thank you!