The Subscription Services tab of Firebox System Manager includes current Firebox statistics about Reputation Enabled Defense activity that occurred after the last device restart.
Activity since last restart:
Local bypass (good) — The number and percentage of URL requests that bypassed local Gateway AntiVirus scanning because they have a reputation score lower than the Good reputation threshold.
URLs blocked (bad) — The number and percentage of URL requests that were blocked without scanning because they have a reputation score higher than the Bad reputation threshold.
Normal processing (inconclusive scores) — The number and percentage of URL requests that were processed normally, because they have a reputation score equal to or between the Good reputation and Bad reputation threshold.
Reputation lookups — The total number of reputation lookup attempts since the last system restart.
The total number of Reputation lookups can be higher than the combined total number of URLs with good, bad or inconclusive scores. This is because the Reputation lookups statistic counts all lookup attempts, whether or not a response was received in time to avoid a local AV scan. If The HTTP proxy does not receive a timely response to a reputation lookup request, it scans the content locally. When this happens, the lookup is added to the Reputation lookup total, but is not added to the total of good, bad, or inconclusive scores.
For more information about the scores for Reputation Enabled Defense, go to About Reputation Enabled Defense.