<html lang="en">
<body>

<p>
    <b>[OOTB] Cisco WSA file. Version 1</b><br>
	Changelist:<br>
	<ul>
		<li>Normalizer name was changed to the "[OOTB] Cisco WSA file".</li>
		<li>New regular expression was added to the main normalizer.</li>
		<li>New field mapping was added: event field "proxy_id" was mapped to the KUMA field ExternalID, event field "requestBytes" was mapped to the KUMA field BytesOut, event field "dstIp" was mapped to the KUMA field DestinationAddress,  event field "user_agent" was mapped to the KUMA field RequestClientApplication, event field "mech" was mapped to the KUMA field DeviceCustomString6.</li>
		<li>New event enrichment was added (SourceUserName to lower case).</li>
		<li>Normalizer description was updated.</li>
	</ul>
</p>

</body>
</html>