Which log will generate an event with the status Contained?
An AV log with action=quarantine.
An IPS log with action=pass.
A WebFilter log will action=dropped.
An AppControl log with action=blocked.
Submit