topic Re: Response Page Without SSL decryption on Prisma Access in Prisma Access Discussions

Response Page Without SSL decryption on Prisma Access

zGomez — Mon, 02 Oct 2023 13:51:21 GMT

Hello,

In order for the user to see a reponse page when browsing a blocked URL category in prisma access I guess you need to decrypt the traffic for the blocked categories.

On my own firewalls I can issue the following command:

How to Serve a URL Response Page Over an HTTPS Session Without ... - Knowledge Base - Palo Alto Networks

Is there a similar option on Prisma Acess Mobile Users / Remote networks ?

Or do we need to decrypt the blocked categories also, waste of resources i'm guessing.

Or maybe i am missing something else.

Re: Response Page Without SSL decryption on Prisma Access

reaper — Tue, 03 Oct 2023 09:04:41 GMT

Why would you (except for legal reasons) not decrypt a certain category?

I'd simply decrypt everything except what you're legally not allowed to, which grants you more visibility and control and allows you to use response pages. The resources are really Palo's responsibility.

Re: Response Page Without SSL decryption on Prisma Access

zGomez — Tue, 03 Oct 2023 09:52:01 GMT

Hi Tom,

Thank you for the reply I have all your books. (star struck 😀) . It just seems a little bit odd to decrypt categories you already block using URL filtering. But I agree with your statement about resources it is the responsibility off Palo.

Re: Response Page Without SSL decryption on Prisma Access

reaper — Mon, 09 Oct 2023 12:27:50 GMT

yeah it's a bit counterintuitive but adding decryption allows you to return a block/continue page in the payload