Policy Results Statistics Attributes

The following table lists and describes the attributes Oracle® Communications Security Shield (OCSS) displays for creating custom Policy Results Statistics reports.

Table B-1 Attributes for Use by Customers

Attributes	Description
Note: On-screen, an icon precedes each Policy Results Statistics attribute to identify the data type.	# - The data type is numeric. A - The data type is text. Clock - The data type is time.
ACL Action	Indicates the Access Control List (ACL) action OCSS applied.
Aggregated Time	Indicates the time at which the record was written to the database.
Call End Time	The ending time of a call. The Call End time might not display when: one of the parties has not terminated the call. a network provider or a system in your organization's network has not canceled the call. when OCSS has not received the call termination update to OCSS. when the Session Border Controller has not sent the call termination update to OCSS.
Call Frequency Limit Exceeded	Indicates that the number of successful calls made to a destination phone number exceeds the frequency threshold limit.
Call Insights	Provides the following information: Application-to-Person (A2P)—Reason codes specific to application-to-person messaging. For example, verification codes, appointment reminders, One Time Passcodes, verification messages, or other calls sent to a user. Person-to-Person (P2P)—Reason codes specific to human-to-human calls. Number Type—The line type or phone type information. Activity—Reason codes related to the amount of activity OCSS observed for the number, compared to what is expected for a good user. For example, the number of communications transactions to or from the number, the quantity of unique numbers communicated with, and the number of accounts communicated with. Alert reasons and names displayed in the notification message text include: ACL Match—acl match ACL Match and Allow—excluded CLI Spoofing Suspected—invalid numbers (to=from) Country Code (Destination) Does Not Exist—invalid country code International Calls Fraud Suspected—fraud-like activity Suspected Fraudulent Destination—high-risk destination Suspected Toll Fraud—toll fraud-like activity Suspected Traffic Pumping—traffic pumping-like activity TDoS Suspected—denial of service-like activity
Call Reputation Grade	The Call Reputation Grade based on the Reputation Score. The Reputation grades include: Critical Risk High Risk Significant Risk Severe Risk Suspicious Good Acceptable Unknown Note: When the call score is -1, unknown indicates the call is blocked by the customer's blocklist and OCSS did not perform the reputation score calculation.
Call Stage	The stage of the call associated with the call record. For example: initiate, mid-call (where OCSS provides an updated policy to the Session Border Controller) , terminate, and update (where the Session Border Controller sends additional information to OCSS).
Call Start Time	The time at which the call started. Note: Call Start Time always displays a value.
Call Terminate State Trigger	Describes the trigger that lead the call to the determinant stage.
Call Termination Initiator	Describes the actor that terminated the call. For example, the caller, callee, Session Border Controller, OCSS, or other.
Call Termination Reason	Describes the reason for call termination. For example: Canceled, Bye, noAnswer, errorResponse, or other.
Call Type	The call type in policy context. For example,International, Suspect, Toll Free, Premium Rate Service, and National.
Called Number	The called number from the TO header of the SIP call.
Called Number Score	The score assigned by OCSS to the called number.
Calling Number	The calling number on record from the FROM header of the SIP call.
Calling Number Score	The score assigned by OCSS to the calling number.
Carrier Name	The name of the telecom carrier of record. When OCSS records do not contain carrier information for the calling number field, OCSS leaves the field empty.
Country Name	The location of the Calling Number for inbound Calls.
Enforcement Action	Comments about why the system applied a particular enforcement action. Comments include the following: Suspected Toll Fraud Suspected TDOS Suspected Traffic Pumping Suspected Anonymous FDCPA rule enforced Acl Allow Enforced Blocklist Enforced CLI Verification Failed Score Enforced
Enforcement Action Trigger	The trigger causing OCSS to apply the final outcome. Triggers include: Anonymous Call center call Enterprise lookup (for outbound calls) Fraud risk Managed list Outbound call frequency limit Reputation score Spam risk STIR TN validation unsuccessful Spoofed call Third party Threats
Final Outcome	The enforcement action OCSS applied, as determined by the Policy Decision Engine based on policy rules. Call actions include: Allow Redirect Reject Rate limit
Ingress	A call direction parameter where "true" means the call is inbound and "false" means the call is outbound.
Lookup Number	The phone number sent from the Session Border Controller to the Policy Decision Engine for enforcement determination. Inbound calls—When the SIP INVITE includes a P-Asserted Identity (PAI) header, OCSS sends the User portion of the PAI header in the Lookup Number field. When the SIP INVITE includes multiple PAI headers, OCSS uses the phone number of the first tel PAI header. When no tel PAI header exists, OCSS uses the User portion of the first SIP PAI header. Outbound calls—OCSS sends the User portion of the TO header.
PAI Display Name	The display name from the P-Asserted Identity header containing a name for the identified user.
PAI Host	The host domain portion of the P-Asserted Identity header.
PAI	The user portion of the P-Asserted-Identity header.
PDE Call End Time	The time at which the Policy Decision Engine initiates termination of a dangling call.
PDE Server ID	The unique ID of the Policy Decision Engine server. Used by Oracle personnel.
Phone Type	Indicates the type of device used to make the call. Devices include Fixed Line, Pager, Restricted or Premium, Toll Free, Voice Mail, and VoIP. Other results include Other, Null, and Unavailable.
Policies Applied Policy	The trigger causing OCSS to apply the final outcome determined by the Policy Decision Engine. Triggers include: Threats Managed List Reputation Score Action Third Party Enterprise Lookup
Policies Decision	Indicates whether or not the Fraud Detect Rule policy was applied. Values: True | False.
Policy Response Time	The number of milliseconds added to the call to send the policy request to the Policy Decision Engine, receive the policy response, and act on the response.
Policy Version	The version of the applied policy.
Realm	The realm for incoming and outgoing calls.
Reputation Call Score Count	The distribution for the configured time period for the reputation score by Call Stage, Call Start Time, Calling Number, Carrier Name, Country Name, Enforcement Action, and Reputation Call Score.
Reputation Call Score	The reputation score for the call.
SBC Receive Time	The time at which the Policy Decision Engine receives the request from the Session Border Controller.
SBC Response Time	The time at which the Policy Decision Engine sends the response to the Session Border Controller.
SBC Server ID	The unique ID of the Session Border Controller server.
Service Provider	The name of the service provider.
Session ID	An encoded Base64 combination of the Call Timestamp, SBC ID, SIP Thread ID, Call ID, From tag, and Realm.
Stats ID Count	Indicates the number calls based on StatsId.

Table B-2 Attributes Reserved for Oracle Personnel

Attribute	Descriptions
Aggregated Time	The time at which the record was written into the database. Used by the OCSS Team for tracking and debugging.
GBUA Processed Timestamp	Used by the OCSS team for tracking and debugging purposes.
Reputation Call Score Count	The count of the reputation score for a call.
Stats ID Count	The call count number based on Stats ID.