topic Re: URL-filtering response page URL variable in General Topics

URL-filtering response page URL variable

LCMember2860 — Thu, 23 Feb 2012 11:20:44 GMT

The URL returned on the filtering response page substitutes underscores ("_") for forward slashes ("/") in the URL.

ie. I go to "www.blockedsite.com" it tells me "www.blockedsite.com_" is filtered. & "www.blockedsite.com/index.html" becomes "www.blockedsite.com_index.html" etc

I've created a custom response page that a inludes a pre-populated link to Brightcloud's recategorisation site but using the <url/> variable the field gets populated with this invalid URL - any ideas?

Re: URL-filtering response page URL variable

rmonvon — Fri, 24 Feb 2012 04:50:36 GMT

What version of PAN-OS are you running? It appears to be a bug and you may want to open a support case. Thanks.

Re: URL-filtering response page URL variable

LCMember2860 — Fri, 24 Feb 2012 09:10:45 GMT

we're using 4.1.2 - I'll try 4.1.3 before logging it as a bug.

Re: URL-filtering response page URL variable

ggarrison — Tue, 28 Feb 2012 01:02:40 GMT

Liam,

Were you able to get it working after the upgrade to 4.1.3? Also, can you provide an example of the code modifications that you made to the response page? I also recommend checking out the DevCenter that has additional resources for customizing the device: < https://live.paloaltonetworks.com/community/devcenter >

-Graham

Re: URL-filtering response page URL variable

dyang — Tue, 28 Feb 2012 05:57:43 GMT

Hi Liam,

This was a bug that was recently addressed. You should see the fix in an upcoming release.

--Doris

Re: URL-filtering response page URL variable

LCMember2860 — Tue, 28 Feb 2012 12:50:15 GMT

thanks

Re: URL-filtering response page URL variable

jasbeck — Mon, 26 Mar 2012 21:33:51 GMT

Interesting - I opened up a support case about this very issue but appearntly they're still researching the problem or think it's being caused by a security rule that PAN is applying.

Currently being experienced when users attempt to go to www.foxnews.com or www.bing.com. Entering in the URL's without the "www." works just fine and presents a CP page for people to authenticate against (using standard block page). Traffic that is from unidentified users is supposed to be CP'ed - the block page with the underscores instead gives the computers IP as the user id and does not prompt for CP.

Running 4.1.3.