Custom Response Pages

[kiwi]

Ever wanted to have a more dynamic or explanatory response page? The default response pages are pretty good, but sometimes you want to add that little bit extra.

So how do you go about spicing up these response pages?

Community member @rufusleonard was on the right track using custom response pages !

You can provide a custom HTML message that is downloaded and displayed.  Each virtual system can have its own custom response pages.  There are different types of custom response pages and all of them can be found under Device > Response Pages as illustrated below:

Response Pages

Block pages are only relevant to user browsers. Application block pages only appear when the application is browser-based.

As rufusleonard already pointed out in his post, the system already provides variables to be used within block pages for substitution at the time of the block event. Some variables, like <user/>, can be used with all block pages. Others, like <pan_form/>, can only be used with certain Block Page types. Here's a list of variables you can use:

<user/>	Username (if available) or IP address of the user
<url/>	Requested URL Destination IP address for SSL Decryption
<category/>	URL filtering category of the blocked request
<appname/>	Application type of the blocked request
<pan_form/>	applicable HTML code for page type function - differs depending on the custom block page is used. URL FIltering Continue and Override Page returns a continue button. Captive Portal Comfort Page returns a user login.
<fname/>	filename.
<rulename/>	The name of the policy/rule that triggered the event
<certname/>	The name of the certificate used for SSL decryption. Other cert variables include: <issuer/>, <status/>, <reason/>, <badcert/>.
<cookie/>	Used in a file blocking continue page and will save a cookie and reload the page to download the file when continue is clicked.
<threatname/>	The name of the threat that triggered the event

  You can even modify response pages from XML-AP :

https://live.paloaltonetworks.com/t5/API-Articles/Modify-Response-Pages-from-XML-API/ta-p/62167

As you can see, there are plenty of options to be creative!

Don't settle for default and start creating your custom response pages today!

Cheers!

-Kiwi.

[Jmarx1]

When will the variable <url/> work in all response pages?  I'm looking at you File Block Page!

[jvalentine]

The first link to the PAN-OS 8.0 documentation is broken, 404.  

[DenizK]

Hi, 

Is there a way to different block page responses for different users,

For example, If user A wants to visit webpage X then blocked with default block response page, But user B wants to visit page X then blocked with Shared block response page, then user C wants to visit page X then blocked with different block response page.

Its important for different region or languages of different users for response pages.

[pfox001]

I'd like to be able to embed a mailto link on the response page that writes the category and URL in the body of the email. Is there a way to do this?

[pfox001]

OK. Turns out you can use the variable directly in the a href code as per below:

<a href="mailto:helpdesk@yourdomain.com?subject=URL%20Blocked&amp;body=I'm%20having%20trouble%20accessing%20the%20following%20URL.%0A%0AURL%3A%20<url/>%0ACategory%3A%20<category/>">email helpdesk</a>

When the link is clicked on, it resolves the variables as part of the url and the result is below.