topic Re: URL Redirect in General Topics

URL Redirect

IT_Admin0815 — Fri, 21 Apr 2017 06:36:09 GMT

Hi,

is it possible to redirect f.e. www.bing.com to www.google.com via Palo Alto.

If yes, how can i do that?

Thx

Re: URL Redirect

Raido_Rattameister — Fri, 21 Apr 2017 06:47:00 GMT

No.

You could use DNS Proxy feature and static entries.

In this case you point your client device DNS settings towards Palo (usually with DHCP).

Set up DNS Proxy to pass on DNS requests to DNS server of your preference.

And add static entry so that if user asks for www.bing.com Palo will reply with IP of www.google.com

Does not work with all web servers (if server runs multiple websites on single IP).

Theoretically you can also do some tricks with response pages and Javascript redirect but this is quite hack already.

Re: URL Redirect

rclark — Thu, 25 Apr 2019 16:35:18 GMT

Yes you can.

You can use the block page to run a script that will re-direct the traffic to another site.

Re: URL Redirect

Brandon_Wertz — Fri, 26 Apr 2019 13:47:30 GMT

@rclark wrote:
Yes you can.

You can use the block page to run a script that will re-direct the traffic to another site.

Isn't that what @Raido_Rattameister already commented above?

"Theoretically you can also do some tricks with response pages and Javascript redirect but this is quite hack already."

Re: URL Redirect

Remo — Fri, 26 Apr 2019 15:47:03 GMT

@Raido_Rattameister wrote:
No.

You could use DNS Proxy feature and static entries.
In this case you point your client device DNS settings towards Palo (usually with DHCP).
Set up DNS Proxy to pass on DNS requests to DNS server of your preference.
And add static entry so that if user asks for www.bing.com Palo will reply with IP of www.google.com

This will end up in certificate warnings and maybe even worse in completely blocked access because of hsts and other https security features.

Re: URL Redirect

Remo — Fri, 26 Apr 2019 16:25:07 GMT

@Brandon_Wertz wrote:
@rclark wrote:
Yes you can.

You can use the block page to run a script that will re-direct the traffic to another site.

Isn't that what @Raido_Rattameister already commented above?

"Theoretically you can also do some tricks with response pages and Javascript redirect but this is quite hack already."

With this "hack"/javascript on the response page you can do great things:

URL redirects and even specific redirects based on categories or specific URLs
Different response page content based on sourceuser/URL category/website
Display the response page in different languages based on the users browser langiage settings
Redirect any access to the RP to a custom webserver and pass along all the attributs like user, category, ... to do some more statistics there (requires custom webserver implementation)
Create a form on the RP where a user could directly open a ticket in case of wrong category (requires jquery)
...

Re: URL Redirect

Brandon_Wertz — Fri, 26 Apr 2019 16:31:24 GMT

@Remo wrote:
With this "hack"/javascript on the response page you can do great things:
URL redirects and even specific redirects based on categories or specific URLs
Different response page content based on sourceuser/URL category/website
Display the response page in different languages based on the users browser langiage settings
Redirect any access to the RP to a custom webserver and pass along all the attributs like user, category, ... to do some more statistics there (requires custom webserver implementation)
Create a form on the RP where a user could directly open a ticket in case of wrong category (requires jquery)
...

At my company we've toyed with the idea about doing this for phishing training. So when we send phishing tests out the response page would be training documentation or something specific we wanted to educate the users on

Re: URL Redirect

Remo — Fri, 26 Apr 2019 16:53:54 GMT

@Brandon_Wertz

That's a good one!

Re: URL Redirect

rclark — Fri, 26 Apr 2019 17:33:48 GMT

Yes. I didn't finish reading his response.

Re: URL Redirect

Brandon_Wertz — Fri, 26 Apr 2019 18:23:03 GMT

@rclark wrote:
Yes. I didn't finish reading his response.

You had 2 years 5 days to read his response...Maybe try 2 years 6 days next time? haha jk