topic Response Page working or not for url filtering in General Topics

Response Page working or not for url filtering

MP18 — Fri, 22 Feb 2019 16:01:02 GMT

We have configured the url filtering response page for one of our sites.

Is there any way from CLI or GUI i can confirm that users when they go to blocked site are actuall getting response page?

I see on GUI url filtering logs that they are blocked.

Re: Response Page working or not for url filtering

Raido_Rattameister — Fri, 22 Feb 2019 16:34:00 GMT

If blocked site is https but you are not performing ssl decyption then users will not see block page.

Re: Response Page working or not for url filtering

MP18 — Fri, 22 Feb 2019 17:35:47 GMT

As per PA

Once the above requirements have been met, enable the Palo Alto Networks device's ability to inject URL filtering response pages within an HTTPS session with the following configuration command. This command works with either BrightCloud or PAN-DB URL filter:

# set deviceconfig setting ssl-decrypt url-proxy yes

I have configured above command on the PA and as it is guest traffic only we do not want to enable ssl decryption.