Response Page: GlobalProtect Portal Login Page

[Raoul.Schaffner]

greetings!

up until panos 8.0.7, i could reference logos and background pictures for my custom portal login page on secondary https servers. the web client would load them and display them.

now with panos 8.0.8, these externally hosted pictures do not get displayed by the client due to newly set http headers named "content security policy" et al.

question: is there a way to edit the content of those new headers in order to allow specific external servers? or to turn them off altogether? if not, is there a way to copy the logos and background pictures into the portal webroot of the firewall itself?

ps: i'm aware of the customization script part inside the portal login page snippet, but it's not enough for my taste.

[marc.jacquat]

There seem to be an issue cased by the new hared added in 8.0.8 that you mentioned in the case
"Content Security Policy" which prevented from loading the images. This has been already reported back to engineering.

At the moment the available workarounds is either to downgrade to 8.0.7 or wait for the firmware release that should contain the fix which is 8.1.1.
Current ETA for 8.1.1 is first week of May.

[Raoul.Schaffner]

thank you very much for this information.

do you know if the 8.0 release train will also receive this fix?

we don't plan to update to 8.1.x in the near future.

greetings,

raoul.