article Nominated Discussion: Why is My Block Page Not Showing? in General Articles

article Nominated Discussion: Why is My Block Page Not Showing? in General Articles https://live.paloaltonetworks.com/t5/general-articles/nominated-discussion-why-is-my-block-page-not-showing/ta-p/524758 <P>This article is based on the discussion "<A href="https://live.paloaltonetworks.com/t5/general-topics/palo-alto-block-page-not-showing/m-p/524324" target="_blank" rel="noopener">palo alto block page not showing</A>" by <a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/27715">@inderjit21</a>  and answered by <a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/43480">@BPry</a> . Read on to see the discussion and solution!</P> <P> </P> <DIV class="lia-message-template-content-zone"> <BLOCKQUOTE> <P>Running panos 10.1.8 on vm-300.</P> <P> </P> <P>A blocked https page returns <STRONG>"This site cannot be reached"</STRONG> rather than the response page.</P> <P>Is this because ssl decryption is not enabled and is it required to get the block page notification for a https url which are supposed to be blocked via url filtering ?</P> </BLOCKQUOTE> <P>Correct, the response page won't be serviced unless you're decrypting the traffic. You can override this setting by running the following command without setting up decryption.</P> <P> </P> <LI-CODE lang="markup">set deviceconfig setting ssl-decrypt url-proxy yes</LI-CODE> <P> </P> <P> </P> <P>Keep in mind that this will <EM>only </EM>work if you aren't in a vwire deployment, ssl decryption is an absolute requirement for that configuration. Keep in mind that your clients will receive an invalid certificate warning unless you take the time to setup a proper Forward Trust certificate to allow the response page to actually be trusted by the clients. </P> <P> </P> </DIV> Wed, 21 Dec 2022 15:12:44 GMT kiwi 2022-12-21T15:12:44Z Nominated Discussion: Why is My Block Page Not Showing? https://live.paloaltonetworks.com/t5/general-articles/nominated-discussion-why-is-my-block-page-not-showing/ta-p/524758 <P> </P> <DIV id="ConnectiveDocSignExtentionInstalled" data-extension-version="1.0.4"> </DIV> Wed, 21 Dec 2022 15:12:44 GMT https://live.paloaltonetworks.com/t5/general-articles/nominated-discussion-why-is-my-block-page-not-showing/ta-p/524758 kiwi 2022-12-21T15:12:44Z