Based on the current product design, the following Anti-Malware actions will be available in Anti-Malware syslog events:
- Pass
- Delete
- Quarantine
- Clean
- Deny Access
- Terminate
- Unspecified
The Unspecified is the action for syslog of all failed actions.
To see the correct action taken in Anti-Malware events, you still need to refer to the Anti-Malware events (e.g. pass failed, delete failed, etc.)