Custom Response Pages

Community Team Member
Ever wanted to have a more dynamic or explanatory response page? The default response pages are pretty good, but sometimes you want to add that little bit extra.
 
So how do you go about spicing up these response pages?
 
Community member @rufusleonard was on the right track using custom response pages !
2017-03-13_11-44-39.jpg
 
You can provide a custom HTML message that is downloaded and displayed.  Each virtual system can have its own custom response pages.  There are different types of custom response pages and all of them can be found under Device > Response Pages as illustrated below:
 
2017-03-13_11-58-28.jpgResponse Pages
 
Block pages are only relevant to user browsers. Application block pages only appear when the application is browser-based.
 
As rufusleonard already pointed out in his post, the system already provides variables to be used within block pages for substitution at the time of the block event. Some variables, like <user/>, can be used with all block pages. Others, like <pan_form/>, can only be used with certain Block Page types. Here's a list of variables you can use:
 
<user/>  Username (if available) or IP address of the user
<url/> 
    • Requested URL
    • Destination IP address for SSL Decryption
<category/>  URL filtering category of the blocked request
<appname/>  Application type of the blocked request
<pan_form/> 

applicable HTML code for page type function - differs depending on the custom block page is used.

URL FIltering Continue and Override Page returns a continue button.

Captive Portal Comfort Page returns a user login.

<fname/>  filename.

 

 Want to add code that triggers the firewall to display different messages ?  Check out the link below for an example :
 
 
You can even modify response pages from XML-AP :
 
 
As you can see, there are plenty of options to be creative!
Don't settle for default and start creating your custom response pages today!
 
Cheers!
-Kiwi.
 
13,339 Views
Comments
L1 Bithead

When will the variable <url/> work in all response pages?  I'm looking at you File Block Page!

9,889 Views
L7 Applicator

The first link to the PAN-OS 8.0 documentation is broken, 404.  

9,366 Views
L0 Member

Hi, 

Is there a way to different block page responses for different users,

 

For example, If user A wants to visit webpage X then blocked with default block response page, But user B wants to visit page X then blocked with Shared block response page, then user C wants to visit page X then blocked with different block response page.

 

Its important for different region or languages of different users for response pages.

2,079 Views
L0 Member

I'd like to be able to embed a mailto link on the response page that writes the category and URL in the body of the email. Is there a way to do this?

1,040 Views
L0 Member

OK. Turns out you can use the variable directly in the a href code as per below:

 

 

<a href="mailto:helpdesk@yourdomain.com?subject=URL%20Blocked&amp;body=I'm%20having%20trouble%20accessing%20the%20following%20URL.%0A%0AURL%3A%20<url/>%0ACategory%3A%20<category/>">email helpdesk</a>

 

When the link is clicked on, it resolves the variables as part of the url and the result is below.

 

PA screenshot.jpg

1,039 Views
Ask Questions Get Answers Join the Live Community
Labels