Looking at SANS last post ( http://isc.sans.edu/diary.html?n&storyid=10141 ) «A question of class», I was wondering if its possible to search the log of Secureweb for the same informations discussed in the article, mainly being able to search/sort all the java class access by my users. A quick look in the access log wasn't positive...
we don't specifically log all members of an archive, as this would blow up the access log massively! However, we are opening .jar archives eversince, as they are pretty much nothing else but a zip file.
Michael Schneider Lead Product Manager for Web Protection (•‿•)