Custom Response Page

[a.jones]

Hi All,

Hoping someone can help. I need a custom response page for URL Filtering. I know I need to use Javascript but that is not my forte so hoping can provide the inform for me. I need to produce two distinct page responses depending on the IP address the user comes from ie:

If they come from address range 10.0.0.0/8 a URL response page produces "Page Blocked for Security Reasons"

If they come from any other address range a URL response page produces "Page Blocked because we have the power to do so".

I understand it is a text file I need to upload, it's just the page construct I'm struggling with.

Thanks in advance

Adrian

[ShaiW]

Hi

I don't see that IP Address is a known variable in the URL filtering response page, if you want to try or just want the HTML file layout, download the current block page and edit it, then re-upload it:

1. Device->Response pages->click on 'URL Filtering and Category Match page'

2. Select predefined then 'export'

3. open text file with editor then import back.

4. Imported file will be called 'shared' and will be used.

Take a look here for more info and the

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-web-interface-help/device/device-response-pages

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/url-filtering/customize-the-url-filtering-...

Hope this help,

Shai

[vsys_remo]

Hi @a.jones 

Do you have user-id configured on that firewall? If not then the variable for the username will contain the IP address which you can then use in a javascript that will display the message like you need it.

[a.jones]

Hi All,

Apologies I may need to add a bit more detail. The configuration contains multiple paths for different partners for a large wireless network. Each Partner has their own SSID and are assigned a specific subnet. Many share the same Response Page for their web traffic but we have a couple that want to have a different response page carrying their own Partner name. Whilst I cannot add multiple response pages and refer a partner to a specific response page I understand that using javascript I can assign a specific response based on the IP source of the user hence the original question.

Regards

Adrian

[vsys_remo]

@a.jones what PAN-OS verison do you have installed?