topic Re: PA 3000 Make users accept TOS before browsing the web in General Topics

PA 3000 Make users accept TOS before browsing the web

Jenkins — Tue, 12 Jan 2021 21:39:19 GMT

Hello, we use our PA 3000 as a router to distribute our ISP to multiple locations. Is there a way that I can make it so when a user try's to browse to the web either a pop up or a redirect happens so that they have to accept terms of service prior to being allowed to continue?

Re: PA 3000 Make users accept TOS before browsing the web

kiwi — Wed, 13 Jan 2021 10:24:27 GMT

Hi @Jenkins ,

I guess you could use captive portal for that.

The default redirect page has something like "The resource you are trying to access requires proper user identification" but you could easily edit and upload your custom response page which includes your TOS.

Cheers,

-Kiwi.

Re: PA 3000 Make users accept TOS before browsing the web

reaper — Wed, 13 Jan 2021 13:24:05 GMT

here's a fancy way of accomplishing that:

create 2 rules,

top rule allows internet http access to all url categories (except undesirable) but source contains a dynamic object using a tag

bottom rule allows all internet http access, but url filtering profile is set to continue for all url categories

add a log forwarding profile to the bottom rule that is set with built-in action to tag traffic as the tag used in the dynamic object in rule1, set the log forwarding filter to trigger on action 'continue'

when new users open a webpage they'll hit rule 2, get served a continue-block page, if they hit continue their IP will get tagged and from there on out they'll hit rule 1 until the tag expires