The action that was taken by Web Threat Shield and/or the user. Currently the following values are supported:

• BLOCK: The user was blocked from visiting the URL.
• RECLASSIFY: The user requested a review of the category and reputation of the URL.
• WHITELIST: The user white-listed the URL.

The URL that was blocked on the endpoint.

The BrightCloud category which caused Web Threat Shield to block the respective URL (e.g. 67). To view a list of all available web categories, visit this BrightCloud page.

The name of the category specified by BlockReasonId, or "Low Reputation", if BlockReasonId is 0.

The BrightCloud Reputation Index (BCRI) value that caused Web Threat Shield to block the URL. The BrightCloud Reputation Index is a security related score which is based on BrightCloud intelligence for a given URL: 80-100 is trustworthy, 60-79 is low risk, 40-59 is moderate risk, 20-39 is suspicious and 0-19 is high risk.

Note: The BCRI value may be null, if a URL is blocked via means of advanced in-place analysis instead of its URL reputation or category, or if ActionTaken is "WHITELIST".